money-ops

SUSPICIOUS overall. The skill's broad capabilities mostly match its stated orchestration purpose, but it enables high-impact autonomous real-world actions: public posting, email outreach, ad changes, monitoring, and potentially production interventions. No clear credential theft or covert exfiltration is shown, and the only scanner finding is low-risk context, but the operational scope is very powerful and the `/schedule`/`/loop` execution model is only partially verified from official docs.