magi

SUSPICIOUS. The skill's main behavior is coherent with its stated purpose, but it forwards user/project context to multiple external model providers, grants broader file permissions than needed, and adds transitive trust via a downstream skill. No clear malware or credential-harvesting pattern is present, but the external data-sharing and permission scope make it medium risk.