finance-reference

SUSPICIOUS: the skill’s finance-reference purpose broadly matches its lookup capabilities, but its actual footprint relies on a third-party gateway and payment facilitator and requires a raw private key to authorize USDC spending. That combination is high-trust for a reference-data skill and creates meaningful credential and financial-action risk even without clear evidence of malware.