cc-gateway-ai-proxy

SUSPICIOUS: the skill’s behavior is coherent with a proxy, but its footprint is high-risk for the stated use. It asks the agent/user to extract a local OAuth refresh token, store it centrally, route all Claude traffic through a custom gateway, and rewrite identity/telemetry fields to present multiple machines as one canonical client. Combined with the publisher/source mismatch and lack of included code for the scripts, this is too trust-heavy and disproportionate for a normal privacy helper, though the provided evidence does not prove malware.