model-keys

SUSPICIOUS: the skill’s stated purpose matches its actions, but it routes a high-privilege master key to an external endpoint whose official relationship to tiny-llm-proxy could not be verified. This is not confirmed malware, but the unverified service provenance and arbitrary --url override create meaningful credential-forwarding risk.