openfin-relay

SUSPICIOUS: The skill is purpose-aligned and uses apparently legitimate OpenFinance/Relay endpoints, with no evidence of malware, hidden execution, or credential harvesting. However, it enables autonomous crypto asset movements and contract calls with real financial consequences, so overall security risk is high despite coherent documentation and confirmation gates.