aicoin-account

The skill aligns with its stated purpose of exchange account management but introduces non-trivial credential handling and a real money transfer capability. The credential exposure surface (ENV-based API keys/passwords), combined with transfer operations, warrants careful access control, explicit per-action confirmations, and secure storage. Referral links and upgrade workflow are ancillary but not security risks in themselves. Overall, the footprint is coherent with the stated purpose but leans toward medium risk due to credential handling and fund-transfer capability; treat as SUSPICIOUS to BENIGN borderline, and prioritize secure handling and user-confirmation features.