model-router

SUSPICIOUS: the skill's stated purpose matches its behavior, but its entire function hinges on an external, unverifiable `router` CLI that receives user task content and session metadata. There is no clear evidence of credential theft or overtly malicious behavior, yet the install/execution trust is disproportionate enough to classify the skill as high security risk rather than benign.