key-recovery-diagnosis

SUSPICIOUS. The skill is broadly coherent with its stated wallet-recovery purpose and includes good guardrails against asking for secrets in chat, but it crosses from diagnosis into enabling local password/seed recovery with third-party cracking tools. That creates meaningful security risk from supply-chain trust and offensive-capability repurposing, even without clear evidence of credential theft or malicious exfiltration.