agentscout

SUSPICIOUS: The skill's purpose and requested credentials are mostly coherent, but trust is reduced by the unseen `requirements.txt`, undisclosed dependency provenance, and the broad 'OpenAI-compatible' endpoint model that can forward API keys and repo content to arbitrary third parties. This looks more like a moderately risky automation skill than confirmed malicious content.