money-upgrade

This looks like a purpose-aligned updater skill, not a credential harvester, but it carries medium risk because its core behavior is to execute the latest remote npm package and modify local skill files. The main inconsistency is provenance: the package scope and GitHub repo owner differ, which weakens install-trust verification and keeps this from being fully benign.