codex-router-external-models

SUSPICIOUS: the skill’s core purpose is coherent, but its trust model is weak. It asks users to run remote installer scripts from a personal GitHub repo, centralizes multiple provider credentials in a local proxy, and supports custom base-URL overrides that could redirect credentials; these risks are significant even though the documented functionality appears legitimate.