trading-orchestrator

SUSPICIOUS: the stated purpose matches trading orchestration, but the footprint is high-risk because it executes an unverifiable local update script and delegates core behavior to many unspecified sub-skills with no provenance. There is no clear evidence of credential theft or malicious exfiltration, but the trust chain and finance-related automation make this a high security-risk skill.