bybit-trading

The skill is purpose-aligned with Bybit trading and routes authenticated requests to Bybit endpoints. No confirmed malware, unrelated exfiltration endpoint, or dangerous pre-execution directive is present. Main concerns are real-money trading capability, credential exposure through hosted-AI conversations, and mutable-branch updates; confirmations and least-privilege guidance mitigate but do not remove these risks.

The fragment is non-executable trading API documentation and shows no evidence of malware or supply-chain compromise. It does document powerful authenticated financial operations, so an implementation using it carries substantial operational and financial risk if user confirmation, parameter validation, account checks, and API response handling are inadequate.