@1826/woofi-swap-optimizer

SUSPICIOUS: the core quote-comparison purpose aligns with the APIs used, but the skill expands into real-money autonomous swap execution, asks for a wildcard wallet policy, and requires loading other skills. Data flows are mostly to official endpoints and there is no clear malware or exfiltration behavior, but the permission scope is broader than necessary and the transitive trust chain increases risk.