moa

SUSPICIOUS: The skill’s high-level capability matches its stated purpose, but it depends on an unseen local shell script that forwards prompts and credentials to multiple remote models and optionally to an unspecified OpenAI-compatible gateway. That makes the main risk data-flow and credential-routing opacity rather than clear malicious intent.