omniroute-web-fetch

SUSPICIOUS. The capability matches the stated purpose, but the data flow is mediated by OmniRoute rather than direct official provider APIs, so both the bearer token and fetched web content pass through a configurable third-party endpoint. There is no direct malware behavior or command execution in this skill, but the proxy design and mutable raw setup reference make it higher risk than a direct API integration.