op0-altar

SUSPICIOUS: The skill’s crypto-token-launch purpose matches its capabilities, but it is inherently high risk because it enables autonomous real-world financial actions and routes sensitive operations through a third-party API. Nothing in the provided content proves credential theft or hidden exfiltration, so this is not confirmed malware; the main concerns are autonomy abuse, centralized API dependence, and moderate external package/install trust.