masumi

SUSPICIOUS. The skill is largely coherent with its stated purpose and mostly uses same-org infrastructure, but it grants an AI agent high-impact autonomous payment capabilities and references one MCP install path not fully verified in the provided evidence. This looks more like a high-risk financial automation skill than malware.