meme-trader

SUSPICIOUS. The visible skill is broadly aligned with crypto token analysis, and its named data sources appear to be official service domains, so there is no clear credential-harvesting or exfiltration pattern in the excerpt. Risk comes from two areas: real-world financial decision support and execution-oriented behavior, plus an unverifiable local script launched via unpinned `npx tsx` whose contents were not supplied. Because that script could materially change data flows or side effects, the skill cannot be classified benign from the provided evidence alone.