taproot-multisig

SUSPICIOUS: The skill’s wallet/signing footprint mostly matches its stated Bitcoin multisig purpose, and there is no obvious credential theft or malicious installer path. Risk is elevated because it enables real-world crypto signing, depends on another local signing skill, and mentions an unspecified coordination API, so the trust boundary is incomplete.