local-llm-router

SUSPICIOUS. The skill’s capabilities mostly fit its stated offline local-LLM routing purpose, and its data flows are largely local/internal rather than exfiltrative. The main issue is install trust: it recommends a wrong PyPI package name and an unpinned git-based uvx install for Serena, while also launching Serena and sending code context to it. That is disproportionate supply-chain risk for an air-gapped/security-focused skill, though not confirmed malware.