llm-gateway

BENIGN with notable supply-chain risk. The skill's capabilities, credentials, and data flows match its stated gateway purpose, and the only flagged network action is a local admin API call. Main concern is install trust: it recommends a mutable LiteLLM image tag that could drift or inherit compromised official releases, while receiving multiple sensitive API keys; pin reviewed image digests and minimize forwarded secrets.