masterhttprelayvpn-proxy

SUSPICIOUS. The skill’s proxy/MITM behavior matches its stated purpose, but that purpose is inherently high impact: it installs a trusted local CA, intercepts HTTPS, and relays browsing through a publicly deployed Apps Script. The main concern is install and execution trust: the skill points to a third-party repo not owned by the listed publisher, lacks verifiable release artifacts, and offers an unrelated pip mirror with lowered trust checks. Data flows are explicit rather than hidden, so this is not confirmed malware, but it is a high-risk skill with disproportionate network and trust-store impact.