catena-cli

The skill has a plausible Catena purpose and uses a standard registry install, but its financial-action scope lacks an explicit approval safeguard and the package's publisher relationship is not verified. Treat as elevated risk, not confirmed malware.