crypto-com-exchange

SUSPICIOUS: the skill is purpose-aligned with a Crypto.com Exchange integration and uses official documented endpoints, but it handles raw API secrets, stores them locally, and enables high-impact financial actions including withdrawals. No clear malware or covert exfiltration is present, yet the credential handling and autonomous transaction scope make it a high-risk skill.