duel-agents-routing

SUSPICIOUS. The skill is internally coherent for an LLM routing proxy, and its installs appear to come from the claimed project via npm/GitHub rather than obviously malicious channels. However, its core function is to reconfigure tools to send prompts and API authentication to a third-party gateway at duelagents.com instead of official model providers, which is a significant data-flow and trust expansion; combined with unpinned installer commands and local config rewriting, this makes it medium risk rather than benign.