messari-alpha-scout

SUSPICIOUS: the core research purpose mostly matches the Messari data calls, but the skill’s footprint is broader than simple analysis because it relies on MoonPay CLI as a payment/auth intermediary, supports unattended cron execution, and explicitly tees research into optional token swaps. Data flows stay on official domains, so this is not overt exfiltration or confirmed malware, but it carries medium risk due to delegated wallet authority and automation around financially consequential actions.