finance-district-mcp

SUSPICIOUS. The skill’s crypto-wallet purpose matches its wallet and DeFi capabilities, and the Finance District domains/org appear coherent. However, the footprint is high-risk by design: it enables autonomous financial actions, uses long-lived OAuth plus a GitHub PAT for token rotation, and is mislabeled `read-only` despite permitting real value movement. This looks like a legitimate but inherently dangerous wallet skill rather than confirmed malware.