moonpay-commerce

BENIGN in purpose alignment and publisher consistency, but HIGH risk in operation because it empowers an AI agent to perform autonomous crypto purchases and transmit buyer PII through an external CLI. No clear evidence of malware or deceptive exfiltration, but the financial-action and third-party-CLI footprint make this a high-security-risk skill.