aave

SUSPICIOUS. The core capability matches the stated purpose, but this skill enables autonomous financial transactions and depends on an unspecified external wallet service endpoint. There is no clear evidence of malware or credential theft in the provided text, yet the unconstrained WALLET_SERVICE_URL and real-money action surface make the skill high risk.