hk-market

SUSPICIOUS: the skill’s market-data purpose is coherent, but its actual footprint is not trustworthy. It hardcodes a credential and sends all requests over plain HTTP to an unverifiable raw-IP backend, creating medium-high security risk from credential exposure and opaque data routing rather than overt malware behavior.