@3182/cross-chain-bridge

SUSPICIOUS. The skill’s purpose and capabilities broadly align with cross-chain bridging, but it performs autonomous financial transactions and depends on an unverifiable local script that would receive API credentials and initiate token approvals/transfers. The main issue is trust and scope: real-money actions plus opaque execution logic make this high security risk even without direct evidence of malware.