jackal-tracker

SUSPICIOUS due to autonomous trading and transitive dependence on the FOX skill, not because of clear malware behavior. The skill’s purpose and capabilities are broadly aligned, but it enables high-impact financial actions with limited transparency and incomplete implementation detail in the fragment provided.

The skill is purpose-consistent but high risk because its core function is autonomous crypto trading with wallet-backed execution and LLM-mediated decisions. Install provenance appears same-org and not overtly malicious, yet the financial autonomy, credential use, and scheduled execution make this a dangerous skill even without clear evidence of credential theft or hidden exfiltration.