agentcash

SUSPICIOUS. The skill’s overall purpose and capabilities are mostly aligned, and the install path appears to be an official same-org npm package rather than a random payload. However, it executes an external CLI at `@latest`, enables paid real-world actions, processes remote instruction-like content, and can install additional skills via `add <origin>`, which expands trust beyond the stated core API-calling purpose. No confirmed malware or credential-harvesting behavior is evident, but the combination warrants medium risk.