scientific-schematics

SUSPICIOUS. The skill’s core purpose is coherent, and requested tools are broadly proportionate, but the documented data flow routes prompts and credentials through OpenRouter rather than direct official provider APIs for the named models. That third-party intermediary is a meaningful data-flow and credential-forwarding risk, especially since the underlying scripts are not present here to verify exact endpoints or key handling. No direct malware indicators, remote installers, or overt exfiltration behavior are shown in the provided skill text.