@1892/dgclaw

SUSPICIOUS. The skill is broadly aligned with its stated purpose, but that purpose is itself high impact: it grants an AI agent autonomous financial trading, withdrawals, subscriptions, and public posting. Trust is weakened by transitive dependency on another skill and incomplete provenance for dgclaw.sh, while credentials are written to local files. Data flows mostly match official Virtuals domains, so this is not confirmed malware, but it is a high-risk trading skill that should require strict human approval per action.