river-markets

SUSPICIOUS. The core purpose is coherent with River Markets access, and the network target is primarily the official River API, but the skill introduces a third-party credential broker/tooling path via vm0.ai and `zero`, while also enabling market execution. The biggest issue is data-flow and trust inconsistency: credentials are provisioned outside River’s own flow, and the documented auth method appears inconsistent with River’s current API docs.