token-guard

The stated purpose is coherent with cost monitoring and model routing, and no explicit credential harvesting or exfiltration is shown. However, the install path relies on an unverified third-party skill/repo and the actual script code is absent, so execution trust cannot be established. Overall this is better classified as SUSPICIOUS than benign due to supply-chain and transitive-install risk, not confirmed malware.