alphagbm-pnl-simulator

SUSPICIOUS. The skill’s capabilities fit its stated P&L-simulation purpose and it asks only for a relevant API key, but its data flows rely on an unofficial-looking zeabur.app backend with no independently verified public API documentation. This is not strong evidence of malware, yet the endpoint trust and redirectable base URL create medium security risk.