nostr

SUSPICIOUS. The core Nostr networking and key use fit the stated purpose, and data flows go to expected Nostr relays rather than unrelated intermediaries. The main risk is autonomous public posting with wallet-derived identities and third-party content amplification; this is proportionate to the skill's purpose but still high-impact and should require explicit user approval for each write action. No clear evidence of credential theft, stealth, or malicious exfiltration is present in the provided material.