bestchange

SUSPICIOUS: the skill's purpose is coherent, but all requests are funneled through a personal-hosted MCP proxy rather than official BestChange endpoints, so user queries and blocker reports flow to a third party the agent cannot independently verify. No credential theft or malware is evident, but the data-flow and trust model are weaker than the finance use case warrants.