magi

SUSPICIOUS: the core Magi functionality is mostly coherent and uses Pixazo's official same-org gateway, so this is not outright malicious. However, it forwards credentials and user content through an intermediary gateway, stores the raw API key locally, includes a possibly inconsistent polling reference, and adds unrelated transitive skill-install instructions with a wildcard target.