polygon-discovery

SUSPICIOUS: the skill's core purpose is coherent, and the main catalog host appears same-org with Polygon, but the footprint is broad: it routes provider traffic through a Polygon proxy, enables wallet-funded paid calls, and includes outbound email actions with real-world effect. This is not confirmed malware, but it carries meaningful security risk and should be used only with explicit approval for each paid or messaging action.