llm-council

SUSPICIOUS: The stated purpose matches consulting multiple LLMs, and the requested OpenAI/Gemini keys are proportionate. However, the skill’s critical behavior is delegated to an unseen local script, so credential handling and actual network destinations cannot be verified; this is a trust gap rather than confirmed malware.