maxia

SUSPICIOUS: the skill is mostly aligned with its stated crypto marketplace purpose and does not show obvious malware patterns, but it centralizes sensitive prompts, wallet identifiers, and API-key-backed actions through a vendor service with weakly verifiable docs/manifest endpoints. Its support for paid marketplace actions on Solana raises meaningful operational risk, so overall risk is medium despite low evidence of malicious intent.