gpt-agreement-payment-replay

MALICIOUS. The skill’s actual footprint is a payment/subscription fraud and account-token acquisition toolkit, not a legitimate developer aid. It solicits high-value credentials, automates anti-fraud evasion, forwards challenge data to external services, and stores obtained refresh tokens; the install path also relies on weakly verified third-party components from a publisher/repo mismatch.