scillm

SUSPICIOUS: the stated purpose is coherent for LLM/VLM/proof assistance, but the mandated proxy-first design weakens data-flow integrity by routing prompts and credentials through an intermediary instead of direct official endpoints. With no clear verification of the proxy’s ownership or controls, the skill presents medium security risk despite not showing confirmed malware behavior.