vercel-xhttp-relay

SUSPICIOUS. The skill is internally coherent as a Vercel-hosted XHTTP relay, and its installs mostly point to official project sources, so it is not confirmed malware. However, it is a censorship-evasion/proxying skill that relays arbitrary traffic, uses curl-to-shell installers, and leverages Vercel's multi-tenant domain to conceal origin infrastructure, making the overall security posture medium-to-high risk.