strategy-signal-tracker

SUSPICIOUS. The trading purpose broadly matches the capabilities and official OKX API usage, but the footprint is not fully coherent because core installation/update steps rely on a personal third-party `skills-store` repo via `curl|sh`, and the skill enables autonomous real-money trading without explicit per-trade confirmation. The main concern is supply-chain and transitive trust, not confirmed malware.