best-practices-scillm

SUSPICIOUS. The skill’s behavior mostly matches its stated purpose as a local proxy debugging guide, and there is no clear malware pattern or remote installer chain. However, it centralizes credentials and request data through a non-public intermediary proxy/debug service rather than official provider endpoints, creating meaningful trust and data-flow risk that is not independently verifiable from the evidence.