nano-mcp-wallet

SUSPICIOUS. The skill is purpose-aligned for Nano wallet custody, but it carries high operational risk because it empowers an AI agent to perform real blockchain transactions and encourages remote execution of an unpinned package (`xno-skills@latest`) whose provenance is not clearly established in the provided evidence. I do not see strong evidence of credential theft or overt malware, but the combination of financial autonomy and mutable supply-chain execution makes this a high-risk skill.