vp-tunnel

SUSPICIOUS. The skill’s capabilities are mostly coherent with its stated purpose and it includes strong safety gating, but its core function is to expose local services externally and one supported tool (tmole) relies on a weaker curl|bash-style install path with limited surfaced verification. This looks like a legitimate workflow skill with medium security risk from external exposure and supply-chain trust, not confirmed malware.