jev-setup

SUSPICIOUS: The skill’s purpose mostly matches its actions and it tries to avoid direct key handling by the agent, but it depends on a not-clearly-verifiable `jev` CLI to capture/store credentials and supports custom gateway overrides plus broader provider routing. No confirmed malicious behavior or explicit exfiltration is present, but the trust boundary around the CLI and alternate endpoints makes the overall skill medium risk.