codex-router-external-models

SUSPICIOUS. The skill's purpose broadly matches its capabilities, but the trust chain is weak: a skill published by ara.so instructs users to install and execute an unrelated GitHub project's scripts, then route multiple provider credentials and OAuth sessions through that proxy. The localhost design is plausible for model integration, yet the remote installer, cross-publisher provenance mismatch, and credential concentration make this higher-risk than a normal documentation skill.