agentcash

SUSPICIOUS: the skill's broad hosted-service marketplace is mostly aligned with its stated purpose, but it relies on an unpinned external CLI, routes data through many third-party service domains, and enables paid real-world actions like email and phone calls. This is not confirmed malware, but it carries elevated execution-trust and autonomy risk.