splits

BENIGN for purpose-capability alignment and install trust: the skill’s footprint matches treasury operations and uses an official npm-distributed CLI. However, it remains a high-impact skill because it can authorize real financial transactions, stores local signing material, and offers an opt-in unilateral module mode, so overall security risk is elevated despite low evidence of malware.