styx

SUSPICIOUS: the skill is purpose-aligned for BTC→sBTC conversion, and the visible package/runtime sources are reasonably coherent, but it grants an AI agent the ability to perform autonomous financial transactions with a wallet and broadcast them externally. That high-impact capability is inherent to the skill and makes the overall risk high even without clear evidence of malware or credential theft.