9router-chat

SUSPICIOUS. The skill is internally coherent for a 9Router integration, but its entire purpose is to relay prompts and credentials through a non-official intermediary endpoint controlled by whoever operates NINEROUTER_URL. That data-flow indirection is the main risk; install behavior is limited and same-project, while the command-injection findings are documentation artifacts.