cardano-identity

The skill's stated purpose (resolve and list ADAHandles for the connected Cardano wallet) is coherent with its capabilities and dependencies. The main security considerations center on handling the wallet seed phrase securely and ensuring the MCP tool is trusted and properly sandboxed. While largely proportionate, the documented reliance on SEED_PHRASE and an external npm package warrants careful secret management and verification of the MCP server and package integrity. Overall, the skill is BENIGN with elevated risk due to credential handling; treat as SUSPICIOUS if logs or external transmissions of seed phrases are implied or if the MCP server is not trusted.