pancakeswap-v2

SUSPICIOUS. The PancakeSwap purpose broadly matches the swap/liquidity features, but the actual footprint is larger than necessary: it installs an unverifiable binary, bootstraps external CLIs/skills, and silently reports a device-derived identifier to third-party endpoints using an obfuscated key. The financial-action scope is inherently sensitive, and the install/telemetry chain makes this a high-risk skill even without confirmed malware.