openwork

SUSPICIOUS: the skill is coherent as a marketplace integration, and data flows go to the claimed Openwork domain rather than an unrelated proxy. However, it grants an AI agent autonomous financial and platform actions without human approval, fetches mutable remote skill content, and exposes the agent to untrusted marketplace content that can influence later actions.