money

SUSPICIOUS: the core routing and local state management are mostly coherent with a business-automation skill, and the npm update check is benign. The main risks are disproportionate autonomy scope, transitive trust in many other skills, and optional credential/data routing through ccapi.ai instead of official model APIs.