agent-dlocal

SUSPICIOUS. The business purpose and described API usage align well with official dLocal workflows, but the skill hinges on an unverifiable local CLI that stores and uses three payment credentials. Because a black-box binary receives secrets and performs networked investigations, the supply-chain and credential-forwarding risk is high despite otherwise coherent purpose and data-flow claims.