cf-proxy

SUSPICIOUS: the skill’s actions mostly match its stated proxy-deployment purpose, but it asks the agent to install a remote skill via a third-party CLI and then fetch core functionality from another personal GitHub repo. The main issue is transitive trust and weak provenance for high-impact account/DNS actions, not confirmed credential theft or malware.