spend-watch

SUSPICIOUS: the skill is mostly coherent with its stated cost-optimization purpose and uses official service endpoints, but it enables unattended real-world mutations when armed and forwards several secrets through a repo-local wrapper. This looks like a legitimate ops skill with medium operational/security risk, not confirmed malware.