SunSwap DEX Trading

SUSPICIOUS. The skill is purpose-aligned and uses a same-publisher npm package, so it does not look like overt malware, but it enables real-money blockchain actions and forwards wallet secrets to an external CLI. Financial autonomy, generic contract-send capability, and possible fallback routing through Bank of AI infrastructure make the overall security risk high even though the install path itself appears relatively legitimate.