gemini-skill

SUSPICIOUS. The core purpose is coherent, and direct Google API usage is normal, but the skill explicitly prefers routing Gemini usage through OpenRouter, which changes data flow and credential trust to a third party. No hidden malware behavior or overt credential theft is evident, but the third-party routing and legacy SDK guidance make the skill higher risk than a direct official Gemini integration.