coinbase-openapi-skill

SUSPICIOUS. The skill’s purpose, Coinbase endpoint, and same-org schema/CLI references are internally consistent, so it is not clearly malicious. However, it forwards exchange credentials into an external CLI, depends on mutable remote schema content, and enables real-money trading actions, making the overall risk medium and higher than a read-only API skill.