relay

SUSPICIOUS: The skill’s purpose and capabilities mostly align with a cross-chain bridge workflow, and the Relay API endpoints are consistent with official service usage. The main risks are proportional but significant: it enables real financial transfers, trusts remote quote data to produce calldata/target addresses, and depends on an external wallet CLI with only partially verified install provenance. This looks like a legitimate but high-impact finance skill rather than malware.