ct-alpha

SUSPICIOUS: The skill’s purpose and core capabilities mostly align with crypto Twitter research, and the flagged command/data-exfiltration patterns are largely documentation artifacts. The key risk is supply-chain trust: conflicting repo ownership and install sources make it unclear which publisher actually controls the skill, so overall risk is medium despite no confirmed malicious behavior in the provided content.