models-config

SUSPICIOUS: The skill's core behavior matches its stated purpose of editing and testing model configs, but it encourages unsafe secret handling and allows credentialed requests to arbitrary user-specified endpoints. Risk is moderate rather than malicious because there is no hidden installer, exfiltration endpoint, or clear mismatch between purpose and capability.