transfer

The skill’s capabilities align with its stated purpose, but that purpose is inherently high risk because it authorizes irreversible cryptocurrency transfers with real financial impact. No clear malware or credential-harvesting behavior is visible in the provided text, and Bun appears to be an official runtime, but the hidden implementation and non-user-invocable transfer capability keep overall security risk high.