leonardo

SUSPICIOUS: The skill’s purpose is coherent, but it relies on a non-obviously official third-party CLI, searches multiple local locations for API keys, and forwards credentials through that CLI. Data flows are broadly consistent with Leonardo use, so this is not confirmed malicious, but the install/provenance and credential-delegation model create meaningful security risk.