pillar

SUSPICIOUS: the skill's crypto-wallet capabilities match its stated purpose, so it is not clearly deceptive or malicious, but it grants an AI agent high-impact authority over real funds and local signing keys. The main concern is autonomous mainnet transaction signing and backend-mediated submission, not supply-chain malware.

No clear malware behavior is present. There is a command-injection risk in browser launching because user-controlled referral data and API-provided operation IDs are interpolated into commands executed by a shell. Use a fixed executable with argument-based spawning (for example, execFile/spawn without a shell) and validate/encode URL parameters.