buying-signal-monitor

SUSPICIOUS: the skill’s purpose and read-only capabilities are mostly aligned, but it relies on a third-party intermediary (`UnifAPI`) for X/LinkedIn/news access and instructs use of another skill, creating moderate transitive-trust and data-routing risk. No direct malware signals, credential-file harvesting, or autonomous messaging are present.