accounts-payable-agent

SUSPICIOUS: the skill’s purpose matches payment operations, but it enables autonomous money movement across fiat and crypto rails with high-impact real-world consequences and no concrete, verifiable approval, endpoint, or credential-routing controls. Risk is driven more by autonomy and missing control details than by confirmed malware or a malicious installer.