wallet

SUSPICIOUS. The stated purpose matches the capabilities, but the skill grants high-impact wallet signing and transfer powers and routes authority through a custom backend URL rather than a clearly fixed official service endpoint. There is no download/execute behavior, so this is not malware-like, but it is a high-risk financial-action skill with partially unverifiable backend data flows.