limit-order-fast

The skill is purpose-aligned and does not show clear malware or deceptive exfiltration behavior, but it is intrinsically high risk because it lets the agent perform immediate financial actions: sign an order, submit it, and potentially auto-approve token spending. Install sources are mostly legitimate and the scanner’s command-substitution findings are benign documentation artifacts, but the wallet access and no-review trading flow make this a dangerous skill that should be classified as suspicious/high-risk rather than malicious.