nexus

SUSPICIOUS: the skill is purpose-aligned for crypto trading, but it enables autonomous real-world financial actions and forwards powerful credentials (wallet signatures and Bankr API keys) to Nexus proxy endpoints. No malware-like installer or hidden execution is present, but the trust and impact profile is high enough that this should not be treated as benign.

The fragment is documentation for financial operations and is not itself executable malware. It does direct users to provide a sensitive Bankr API key to a backend and relies on that backend to construct withdrawal data and bind the destination. Use only if the backend is trusted and independently verified; the suggested temporary, restricted-lifetime key reduces exposure. The implementation and endpoint are not available here for verification.