gumroad-support-refund-request

SUSPICIOUS: the business purpose is coherent with a support-refund skill, but it grants an AI agent authority to autonomously perform monetary refunds using hidden privileged tooling. No clear malware or exfiltration signs are visible, yet the redacted command/auth flow and direct financial execution make this a high operational-risk skill.