qrcoin

SUSPICIOUS. The read-only blockchain query steps are coherent and low risk, but the skill’s core purpose is to help an AI agent initiate real-money USDC approvals and auction bids on a blockchain through a third-party executor (Bankr). That is proportionate to the stated purpose, so this is not malware, but it is still high risk because it enables autonomous financial actions and forwards sensitive transaction intent to an external service unrelated to Base or QR Coin’s official on-chain endpoints.