distribute-tokens

BENIGN but high-risk-by-function. The skill’s money-movement, GitHub reads, local state files, and Bankr API usage are internally consistent with its stated purpose, and data flows go to official endpoints. The main concern is inherent autonomy and financial impact: a write-capable Bankr key plus on-chain transfer capability can move funds, so operational use should require explicit user approval and careful key scoping.