mlx-brain

SUSPICIOUS: The skill’s purpose broadly matches local/remote MLX inference, but its footprint includes remote command execution and an unversioned local workspace script with weak install provenance. No clear credential harvesting or exfiltration is shown, so this is not malicious, but it carries medium risk due to command execution trust and opaque local dependencies.