fin-opencli-reader

SUSPICIOUS. The core read-only purpose mostly matches the capability, and the main OpenCLI install path appears to be an official npm/GitHub distribution. However, the skill broadens agent exposure to many untrusted content sources, references cookie-based adapters, and includes transitive skill-install/update commands that are not necessary for simple reading. No clear credential theft or malicious exfiltration is present, but the footprint is broader than a minimal reader and warrants medium caution.