codexcont-middleware

SUSPICIOUS: The skill’s proxying and credential forwarding are broadly consistent with its stated middleware purpose, and the flagged shell commands are normal documentation. The main concern is install trust and publisher mismatch: users are asked to clone and run a personal GitHub repository that is not same-org verified with the skill publisher, while the middleware can relay or inject API credentials to upstream endpoints.