cashout

SUSPICIOUS. The skill is largely aligned with its stated purpose and uses a normal npm install path, but it enables autonomous real-world financial actions and routes sensitive cash-out activity through a third-party offramp SDK/service. There is no strong evidence of credential theft or overt malware, yet the financial-action and intermediary-trust model make it higher risk than a typical documentation skill.