bybit-trading

SUSPICIOUS. The core trading purpose matches the Bybit API usage and credential needs, but the skill has a large trust footprint: self-update, remote module loading, local file overwrite, optional OAuth bootstrap fetches, and real-money actions. Same-org provenance and checksum checks make it more coherent than malware, but it remains high security risk because it combines remote-updatable behavior with credential handling and autonomous financial operations.

No explicit malware behavior is visible in this documentation fragment (no hardcoded secrets, no obfuscation, and no clear data-exfiltration/backdoor instructions). The primary security finding is elevated supply-chain/integrity risk: the skill is installed from remote GitHub content and can self-update at session start using remote VERSION/MANIFEST and downloaded file lists. Because the actual skill implementation is not provided here, claimed protections (prompt-injection defense, local signing, confirmation gating, and secret handling) cannot be verified; treat the remote install/update pipeline as the main risk and require code and update integrity review before use with mainnet credentials.