0xwork

SUSPICIOUS: the skill is purpose-aligned and uses mostly official channels, but it enables autonomous financial actions with real monetary impact and forwards signing authority through sensitive credentials. The main risk is not hidden malware behavior; it is the combination of blockchain spending/staking, third-party signing trust, and untrusted task content processed by an agent that may also execute tools.