ct-monitor

SUSPICIOUS. The skill’s capabilities broadly match its crypto-monitoring purpose, and it does not contain malware-like execution tricks or third-party binary installers. The main concerns are trust and scope: it forwards a bearer API key to a lightly verifiable custom .xyz service, and it promotes autonomous scheduled Telegram alerts plus watchlist mutations and investment-style recommendations. This is more risky than a normal read-only documentation skill, but not fundamentally incompatible with its stated purpose.