codexsaver-cost-router

SUSPICIOUS: the skill’s purpose is coherent, but the trust chain is not proportionate. It asks users to install and route work through third-party code from a different publisher identity, with broader credential/storage and worker-runtime dependencies than the skill text clearly discloses. No confirmed malware or overt exfiltration endpoint is shown, but install provenance and credential/data forwarding risks are material.