cardexscan-dca

SUSPICIOUS: the capability matches the stated Cardano DCA purpose, but the skill enables financial actions through opaque local scripts with no visible install provenance, endpoint disclosure, or auth/wallet safety details. This is not confirmed malware, but it is a medium-risk skill that should not run autonomously without explicit user approval for each trading action.