mkt

SUSPICIOUS: the core functionality is coherent for a market alert skill, but it installs and relies on a third-party CLI from a personal GitHub repository outside an official registry, while also enabling scheduled autonomous outbound notifications. This looks more like a high-risk but purpose-aligned alerting skill than confirmed malware; the main concerns are supply-chain trust, daemon exposure if misconfigured, and autonomous messaging.