cve-search

SUSPICIOUS: the stated purpose is CVE lookup, but the skill adds a third-party paid gateway, remote helper download, plaintext wallet private key handling, and autonomous payment authorization. This is not confirmed malware, but it is a high-risk skill because an unverifiable fetched client receives sensitive credentials and can trigger real financial actions.