llm-tools

SUSPICIOUS. The skill's purpose is coherent, but its core execution path depends on unspecified local CLIs and likely forwards provider credentials plus file contents to external LLM services. Because installer provenance is missing and the binaries are not verifiable from the supplied evidence, this carries high supply-chain and credential-forwarding risk even though the behavior is plausibly legitimate.