prava-agent-payments

SUSPICIOUS: the skill is coherent for agent payments, and its main data flow goes to same-brand Prava infrastructure, but it grants an AI agent the ability to complete real purchases using returned payment credentials and includes external CLI/skill update trust paths. This is not confirmed malware, but it is high-risk due to autonomous financial action and sensitive credential handling.