ccc-research

SUSPICIOUS: the core large-context fallback behavior is coherent, but the skill normalizes sending extensive local content to external services and allows third-party routing via OpenRouter or unofficial Gemini MCP implementations. Direct Google Gemini API use is proportionate and lower risk; third-party MCP or proxy use introduces notable data-flow and credential-forwarding concerns, and the outdated 'gemini-pro' reference reduces trust in the guidance.