legiox-oath

SUSPICIOUS. The stated purpose aligns with a verification workflow, and there are no direct malware indicators, dangerous installers, or credential-harvesting instructions. However, the skill’s core behavior relies on custom private LegioX MCP tools/server whose ownership, implementation, and data handling are not publicly verifiable, so trust and data-flow integrity remain unclear.