cli-cost-usage
Warn
Audited by Socket on Oct 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The install path is relatively normal and not overtly malicious, but the skill's scope is narrower than the broad gateway CLI it asks users to install, and raw API keys may be forwarded through OmniRoute-controlled services without clear endpoint disclosure. This is more consistent with medium security risk than benign documentation.
Confidence: 81%Severity: 54%
Audit Metadata