send

SUSPICIOUS: the skill’s purpose and commands are aligned, but it enables direct cryptocurrency transfers and relies on mutable third-party CLI code via `npx ...@latest`. This is not confirmed malware, yet it is a high-impact financial skill with meaningful supply-chain and trust risks.