rombot-cli

SUSPICIOUS: the stated purpose is coherent, but trust and data-flow integrity are weak. The skill installs another skill transitively, uses an opaque Python CLI not shown here, stores a custom token locally, and sends queries/tokens to a configurable remote URL rather than a clearly pinned official endpoint.