ordinals-p2p

SUSPICIOUS. The skill’s capabilities mostly match its stated purpose, and there is no clear evidence of credential theft, obfuscation, or remote code execution. However, it enables autonomous cryptocurrency trading actions and sends signed trade records to a custom third-party ledger, creating meaningful financial and trust risk even if the service appears same-project and not overtly malicious.