ao

SUSPICIOUS: The visible skill is mostly coherent with its stated purpose, but it delegates key security-relevant behavior to an external CLI and unseen setup/docs covering installation, key storage, token handling, and partner API routing. No confirmed malware is visible in the provided text, but the credential/token scope and incomplete install/data-flow details create meaningful security risk.