ml4t-strategy-workflow

SUSPICIOUS: the skill is internally coherent and uses official same-org dependencies, with no clear exfiltration or malicious install behavior. However, it enables autonomous live trading with broker credentials and lacks explicit per-action approval controls, making the overall security risk high despite low malware likelihood.