agent-usage-optimizer

SUSPICIOUS: the core quota-reading purpose is plausible, but the skill’s actual footprint is broader than needed. It mixes benign local telemetry analysis with live GitHub mutation and brokered model calls via Hermes, including OpenRouter as a third-party intermediary for Gemini traffic. Not confirmed malware, but the data flows and operational scope are moderately risky for a reference-style routing skill.