pp-openrouter

SUSPICIOUS: the skill is broadly aligned with OpenRouter operations, but its real footprint is larger than a simple API guide because it requires a third-party publisher CLI, forwards OpenRouter credentials to that code, and can send outputs to arbitrary webhooks. Install provenance is same-publisher and source-visible, which argues against malware, but the combination of credential forwarding, management-key support, and outbound delivery makes this a medium-risk skill rather than benign.