t2000-job

Purpose and capabilities are internally consistent for a crypto escrow jobs skill, and the install path appears to use an official npm package tied to the same publisher. The main risk is not hidden malware but the skill’s inherent ability to trigger real USDC escrow transactions and publish job content, so it should be treated as high security risk despite low evidence of malicious intent.