pg-sell

SUSPICIOUS: The skill is broadly aligned with its stated purpose as a ProxyGate seller workflow, and its CLI usage looks consistent with an official npm-based tool. However, it requires substantial trust in ProxyGate because seller API keys/OAuth tokens and local service traffic are routed through ProxyGate infrastructure, and the publisher/package provenance is only partially verifiable from the evidence provided. Main concern is third-party credential forwarding and tunnel exposure, not confirmed malware.