glam

SUSPICIOUS: The skill is purpose-aligned and uses official same-org npm packages, so it does not look like credential theft or malware. However, it equips the agent to perform high-impact financial actions and repeatedly encourages bypassing confirmation prompts, which is disproportionate for safe autonomous use even though the underlying toolchain appears legitimate.