coinapi

SUSPICIOUS: the skill is coherent as a Membrane-based CoinAPI wrapper, but not as a direct CoinAPI integration. Install trust is moderate and mostly legitimate via npm, yet the main concern is third-party mediation: authentication, connections, and action execution are routed through Membrane rather than official CoinAPI APIs, expanding trust and data exposure beyond the stated purpose.