blockrun

SUSPICIOUS. The skill's core behavior is coherent, and the package source appears same-org and normally distributed, so this is not confirmed malware. However, it enables autonomous financial spending and routes user data through a BlockRun intermediary to multiple providers, creating high real-world action risk and notable data-flow trust concerns.