injective-trading-tokens

SUSPICIOUS. The skill’s capabilities align with Injective token management, but it enables autonomous financial transactions and forwards sensitive signing material to an external MCP server via a transitive skill dependency. I found no direct credential-stealing or malicious exfiltration in the skill text itself, but the real-world asset movement and backend trust chain make it high risk.