shioaji

SUSPICIOUS: the skill is coherent as a trading integration, but it enables high-impact financial actions and instructs transitive plugin installation from a third-party GitHub marketplace. This is not clear malware, yet it carries high operational and security risk because broker credentials and real-money trading can be driven through installed external tooling.