ton-create-wallet

SUSPICIOUS: The skill is purpose-aligned for TON wallet onboarding and uses TON-controlled domains, so it does not look like credential harvesting or a fake proxy flow. However, it creates and relies on an operator private key for autonomous blockchain actions, may expose a callback endpoint, and enables real financial activity, making the overall security risk medium-high even without clear malware indicators.