trading-alert-scheduler

SUSPICIOUS. The stated purpose is coherent for a trading-digest skill, and the web-search ingestion is expected, but the trust boundary around IBKR access is weak: the skill depends on a personal, archived third-party MCP server to handle sensitive portfolio/account data. That makes the skill disproportionally risky for a finance workflow even without confirmed exfiltration or explicit malicious logic.