broker-mcp-selector

SUSPICIOUS: the skill’s capabilities broadly match its purpose, but the purpose itself is high risk because it equips an agent to perform real financial trades and to route brokerage credentials into external MCP servers, including community-maintained ones. Its safety language is responsible and transparent, which lowers malware confidence, but autonomous trading, credential forwarding, external live-list dependence, and transitive automation guidance make the overall security risk high.