integration-tests

SUSPICIOUS. The core behavior is mostly coherent for an SDK integration-test skill: local builds, isolated envs, PyPI installs, and live API regression checks. The main concern is that the default multi-provider path uses OpenRouter, a third-party gateway rather than only official provider endpoints, so credentials and test traffic are routed through an intermediary. No clear malware indicators, stealth, or deceptive installer behavior are present, but the third-party credential/data flow and transitive skill reference raise medium security risk.