api-gateway

SUSPICIOUS: the skill is internally consistent and same-org published, but its core design is a managed proxy that routes all API traffic and effective OAuth-backed access through Maton rather than official service endpoints. That makes the capability broad and sensitive; risk comes from intermediary data flow and potential autonomous external actions, not from malware or hidden install behavior.