bankr-signals

SUSPICIOUS: the skill is broadly aligned with a crypto signal platform, but it carries elevated risk because it forwards a high-value Bankr agent key to external signing APIs, encourages recurring remote-instruction fetches via heartbeat, and supports autonomous trading-adjacent actions. No confirmed malware or obvious credential-harvesting proxy was found, but the financial-action scope and indirect prompt-injection path make it higher risk than a typical API integration.