zerion

SUSPICIOUS: The skill's overall purpose fits crypto wallet operations, but the official-evidence mismatch on package name and repository materially weakens install trust. Because the skill asks for API keys and private keys and enables financial actions through an external CLI, the provenance inconsistency makes the risk high even without proof of confirmed malware.