prava-pay

SUSPICIOUS: the skill is internally coherent and appears same-org with mostly official install paths, but it grants an AI agent the ability to carry out real financial transactions and future mandate-based charges via an external CLI and browser automation. This is not overtly malicious, but the autonomy and transitive skill-install behavior make it high-impact and medium-to-high risk.