aibtc-news

Mostly coherent skill for the official aibtc.news platform with proportionate wallet/signing requirements and official API data flows. Main risk is autonomy/public-action abuse: it can publish content and perform publisher-grade state changes, so it should only run with explicit user approval for each write action.

No clear malware, credential harvesting, persistence, reverse shell, cryptomining, destructive filesystem activity, or deliberate obfuscation is present. The code performs expected authenticated API and wallet operations. The material security risk is automatic signing and submission of an sBTC payment whose amount and recipient are supplied by the API response, without visible user confirmation or independent allowlist validation. The signing helper and imported wallet modules require separate review because they handle private keys and inherited environment variables.