volcengine-sale

SUSPICIOUS: The main billing capabilities align with the stated purpose and mostly route data to official Volcengine tooling, so this is not malware. However, it is a high-impact transactional skill that can buy or cancel services, and it introduces medium supply-chain/transitive-trust risk by auto-installing delegated skills, including external GitHub-based ones via broad clone/README instructions.