certaindata

SUSPICIOUS: The skill is largely coherent with its stated purpose as a paid data/x402 orchestration skill, and credential flow stays on the CertainData domain. However, it enables real-money delegated payments, reads secrets from local env files, and makes direct calls to arbitrary third-party seller endpoints discovered from Bazaar, creating medium risk even without clear malicious intent.