trade-executor

SUSPICIOUS. The stated purpose aligns with using exchange API keys and placing trades, but the skill enables autonomous financial actions and relies on unspecified exchange implementation files and an unnamed gateway for risk tracking and audit logging. The biggest concern is incomplete visibility into actual network destinations and credential/data routing, not confirmed malware.