api-gateway

SUSPICIOUS. The skill is coherent with its stated purpose and uses same-org Maton domains with no installer red flags, so it does not look malicious. However, its core design routes credentials, API traffic, and downstream actions through Maton as a managed proxy, which is a significant trust and data-flow risk relative to direct official API use.