maxia

SUSPICIOUS: The skill’s crypto/marketplace capabilities mostly match its stated purpose, but it enables real-world monetary actions and routes prompts, wallet data, and authenticated operations through a third-party hosted platform and remote MCP manifest. This is not clearly malicious, yet the combination of autonomous transaction capability, centralized intermediary data flows, and remote tool trust makes it medium-high risk.