vault-api

SUSPICIOUS. The skill is largely purpose-aligned and behaves like documentation for Vault API usage, with no malware-style installer or hidden execution. However, it is a third-party skill covering highly privileged secret-management operations and it routes credentials to an external gateway domain whose ownership is not verified, creating a medium data-flow and trust concern.