market-weather

SUSPICIOUS. The skill's stated purpose and local file access are broadly coherent, and there is no visible credential harvesting or exfiltration path. However, its core functionality relies on an unverified local executable (`macro-signal-tracker.py`) with no documented source, package provenance, or release verification; under the skill-scoring rules, that unverifiable dependency makes install/execution trust high risk even without stronger signs of malicious intent.