stocks-advisor

SUSPICIOUS. The skill is largely purpose-aligned for stock research, and its main external tools appear to use documented official or same-project channels rather than obviously malicious payloads. However, the overall footprint is broad: it pulls sensitive holdings data, processes untrusted live content, executes many local scripts/commands, chains into other skills/tools, optionally publishes reports, and auto-registers alerts/scheduled routines without per-action approval. This looks more like a high-risk, overpowered research-and-automation workflow than confirmed malware.