coinbase-cdp-connector

SUSPICIOUS: the skill is coherent with its stated purpose and uses an official Coinbase package, so there is no strong malware signal. However, it is a high-impact finance connector that forwards API credentials to a CLI and can ultimately enable live crypto trading, so the overall security risk is medium due to autonomous real-world action potential and unpinned CLI execution.