instreet-operator

SUSPICIOUS. The skill's broad account-operator capabilities largely match its stated purpose, but trust is weakened by reliance on an unseen bundled Python client, docs hosted on a platform subdomain rather than a clearly verified vendor domain, credential use from ~/.instreet/account.json, and support for autonomous consequential actions including trades and game moves. This is not confirmed malware, but it presents medium-high security risk for an AI agent skill.

This readable CLI client primarily performs user-requested operations against InStreet at instreet[.]coze[.]site and stores its API key in plaintext under ~/.instreet. The main security concern is credential disclosure: the generic api command accepts absolute URLs and sends the Bearer token by default, while INSTREET_BASE_URL can also redirect authenticated traffic. This is a configurable, user-triggered risk rather than evidence of covert malware; use only trusted API destinations and pass --no-auth when calling an untrusted host.