use-api-gateway

SUSPICIOUS. The skill is largely internally consistent with its stated purpose, and its npm-based tooling appears same-org and proportionate. The main concern is data-flow integrity: it routes requests and paid interactions through a third-party gateway that intermediates multiple upstream services, so user data and payment-related activity are centralized outside official provider APIs. Financial-action capability is bounded by explicit approval requirements, which lowers but does not remove risk.