@349/binance

SUSPICIOUS. The skill is purpose-aligned for Binance trading and uses a legitimate registry dependency, but it enables autonomous high-impact financial actions, persists install behavior, and requires exchange credentials for a bundled engine that was not provided for review. No clear malicious exfiltration is evident, but the real-world trading authority and partial trust gap make this a high-risk skill.