endaoment

SUSPICIOUS: the skill is purpose-aligned for charitable crypto donations, and the visible external dependency (Bankr) appears official rather than a random payload. However, it enables autonomous real-world financial transfers through a third-party signing service, and the actual local shell scripts are not provided, so execution and data flows cannot be fully verified. High security risk comes from transaction authority and hidden script behavior, not clear evidence of malware.