trade-risk

SUSPICIOUS: the core purpose is coherent for a trading risk skill, and there is no clear credential theft or covert exfiltration. Main risks are untrusted web-content ingestion combined with code/file-write capability, plus same-repo but unpinned curl|bash installation and financially consequential recommendations.