moonpay-fund-polymarket

SUSPICIOUS. The skill is broadly aligned with its stated purpose, but it has meaningful risk because it enables autonomous funding, bridging, and trading of real assets, and it installs a CLI via curl|sh. This looks more like a high-risk financial automation skill than malware; the main concern is real-world transaction capability and installer trust, not hidden exfiltration.