open-agent-sdk

SUSPICIOUS: the skill’s capabilities broadly match an agent SDK, but its trust boundaries are looser than the description suggests. Installing a third-party SDK to handle Anthropic credentials, optional rerouting to OpenRouter, default bypassPermissions, and unpinned MCP npx examples create meaningful supply-chain and agent-execution risk even without clear malware or overt exfiltration.