crypto-com-app

SUSPICIOUS: The skill’s capabilities broadly match its purpose as a Crypto.com trading integration, and data appears intended for the official Crypto.com API rather than an unrelated proxy. However, it grants an AI agent high-impact financial powers, including withdrawals and optional auto-trading, and relies on unpinned npx execution of helper code. This is not confirmed malware, but it is a high-risk skill due to autonomous real-world actions and credentialed script execution.