5minbtc

SUSPICIOUS. The network endpoints and distribution path are mostly coherent and official, so this does not look like credential harvesting or malware. However, the skill’s footprint includes persistent daemons, signed Binance trading APIs, Telegram pushing, code-patching instructions, and optional live trading with real financial impact; that makes it higher-risk than a normal analysis skill and only partly proportionate to a 'prediction' skill, even though the data flows stay on official Binance infrastructure.

The code appears to be a cryptocurrency market-data and prediction utility, with no evident malware or data-theft behavior. The explicit disabling of TLS certificate verification is a significant security weakness because it allows intercepted HTTPS responses to be accepted as valid.