jentic-api-improve

SUSPICIOUS: the core capability is coherent with improving OpenAPI specs and the main tools appear to be official Jentic/registry-distributed dependencies, so this is not confirmed malware. However, the skill materially increases trust requirements by promoting bypassPermissions, broad Bash pre-approvals, autonomous subagent execution, unpinned npx installs, Docker pulls, and forwarding API/provider credentials to external CLIs and services.