Debank Skill

This skill appears to do what it says: it uses the debank-cli to query DeBank. Before installing or running it, consider these practical steps: 1) Manually review and install debank-cli yourself rather than letting an automated agent run npm -g, because npm installs execute code during install. 2) Verify the npm package and repository (maintainers, recent activity, and checksums) to reduce supply-chain risk. 3) Provide a scoped/limited DeBank Pro key if possible and understand that the CLI will save it to ~/.debank-cli/config.json — protect that file (permissions) and avoid sharing the key elsewhere. 4) Prefer to run the CLI locally in a controlled environment (container, VM) if you are concerned about executing third‑party npm code. 5) If you want higher assurance, request the skill author publish an explicit install manifest (signed release or pinned package version) or provide an audited binary instead of leaving installation to an automated agent. If the SKILL.md had asked for unrelated credentials, contained external upload endpoints, or required downloads from arbitrary URLs, the assessment would be more suspicious.