SunPerp Perpetual Futures Trading

SUSPICIOUS: The skill’s capabilities align with its stated purpose as a trading skill, and its install path is relatively standard. However, it enables high-impact financial actions, including irreversible withdrawals, and requires forwarding exchange credentials plus a raw TRON private key into local code not published by the exchange operator. The visible instructions emphasize user confirmation, so this is not confirmed malware, but it is a high-risk skill that should only be used with strict per-action approval and strong trust in the skill code and npm dependencies.