config-codex-cli

SUSPICIOUS: the skill is internally coherent as a Codex-to-OmniRoute configuration guide, but its actual footprint reroutes OpenAI Codex traffic and likely credentials through a third-party backend. The npm install path has some provenance support, so this is not confirmed malware, but the trust and data-flow implications are significant.