trade

SUSPICIOUS. The skill’s core purpose is coherent, and its market-data flow appears to target the official Funda AI API, but it unnecessarily instructs the agent to read credentials from the root `.env` and relies on a separate external skill for essential functionality. This is not confirmed malware, but it is a medium-risk trading skill with credential-handling and trust-chain concerns.