payment-assistant

SUSPICIOUS. The skill is internally coherent and uses official-looking Binance endpoints and normal package-manager installs, so it does not look malicious. However, it grants an AI agent the ability to execute real financial payments using sensitive API credentials, which is inherently high risk even with confirmation gates.