soul-markets

SUSPICIOUS. The skill is broadly coherent with an agent-commerce marketplace and uses vendor-matching APIs, so it does not look like disguised malware or a supply-chain lure. Risk comes from high-value credential handling, optional raw private keys, monetized autonomous actions, and guidance that could lead users to upload sensitive access details in soul.md.