swap-approve

SUSPICIOUS. The skill is purpose-aligned for DeFi approvals and mostly uses coherent data flows, but it authorizes real financial actions, supports unlimited token approvals, and forwards signing credentials to a CLI. The Foundry installer appears official, so this is not strong malware evidence, but the skill carries meaningful operational and credential-handling risk.