use-agently

SUSPICIOUS: the skill’s marketplace/discovery purpose partially matches its features, but its actual footprint is much broader. It installs a third-party CLI, stores a wallet private key, enables paid actions, and forces all MCP/HTTP/A2A traffic through the vendor gateway instead of direct endpoints. This looks more like a traffic/payment intermediary than a narrow search helper, so the data-flow and scope are disproportionate even without confirmed malware.