jingswap-cycle-agent

SUSPICIOUS. The core behavior is coherent for a DeFi monitoring/participation skill and mostly uses official endpoints, so this is not confirmed malware. Risk is elevated because it supports agent-mediated financial action and its documentation appears stale about Pyth API-key requirements, which weakens trust in the stated no-credentials data flow.