tx-explain

SUSPICIOUS. The core behavior is well-aligned with a blockchain transaction explainer and its network destinations are official service endpoints, so there is no strong sign of intentional exfiltration or malware. However, the skill forwards an optional Etherscan API key to an unverifiable local helper (`./secretcurl`) and also relies on an unspecified `./notify` binary/script, creating a disproportionate trust gap that forces a high security-risk classification under the dependency rules.