allium-data

SUSPICIOUS. The skill's capabilities broadly match its blockchain-data purpose, and the CLI/package appear to be legitimate same-ecosystem tooling. However, the install path is inconsistent with the official documented installer and uses plain HTTP pipe-to-shell, while the skill also collects high-sensitivity credentials including raw private keys and forwards them to the CLI. This looks more like risky install/auth design than confirmed malware, but the combined installer trust and credential-forwarding issues raise the skill above benign.

The documentation presents a legitimate-looking CLI setup workflow but contains a significant supply-chain risk: it downloads an unauthenticated installer over HTTP and executes it directly through the shell. It also exposes sensitive credentials, especially private keys and Privy secrets, as command-line arguments. No direct malware behavior is demonstrated in the supplied text, but the installation command should not be trusted without obtaining the script over HTTPS and verifying its signature or checksum. Credentials should be supplied through a safer mechanism that avoids shell history and process-argument exposure.