benchmark-models

SUSPICIOUS. The stated purpose is coherent, but the skill’s real execution path is too opaque: a local Bash script and composed skills do the core work, and model traffic is routed through an unspecified /scillm component rather than a clearly documented official API. No direct credential theft or exfiltration is shown in the provided text, but install trust and data-flow integrity are insufficiently verifiable.