trader-risk

SUSPICIOUS. The skill’s capability matches its stated trading-risk purpose, but it relies on installing and executing an unpinned third-party npm CLI whose public provenance is imperfect. There is no clear credential theft or unrelated data exfiltration in the skill text, so this is better classified as elevated supply-chain risk than confirmed malware.