psbt

The skill is purpose-aligned but high risk because it can sign and broadcast real Bitcoin transactions using an active wallet. I see no strong evidence of malware or deceptive credential exfiltration, but the financial-action capability and third-party broadcast path make it a dangerous skill that should require strict user oversight.