use-circle-cli

SUSPICIOUS: The skill is internally coherent with its Circle/USDC purpose and uses an official npm package plus Circle-owned domains, so there is no strong sign of malware or credential harvesting. Risk is still medium because it is a broad master skill that can install/update additional skills and lets the agent perform autonomous financial/onchain actions with real-world consequences.