chem-pubchem-compound

SUSPICIOUS: the skill’s chemistry purpose is coherent, but it mixes remote script execution, third-party gateway routing, and autonomous wallet-based payment. This looks more like a risky paid integration than clear malware; the main concerns are supply-chain trust for call.mjs and exposing a signing key to agent-controlled code.