injective-trading-autosign

SUSPICIOUS. The skill is internally coherent for Injective auto-trading, and I found no clear credential exfiltration or fake infrastructure. However, it enables autonomous financial transactions, reduces user approval friction by delegating trading authority to a session key, accepts a wallet password in the workflow, and expands trust by installing another skill. High security risk comes mainly from real-world trading autonomy and delegated signing authority, not from confirmed malware.