xion-faucet

SUSPICIOUS: the skill's stated faucet capabilities are internally consistent and proportionate, but its trust chain is incomplete because it depends on an unverified `xion-toolkit` CLI and other skills for authentication and execution. There is no clear evidence of malicious exfiltration or deception in this skill alone, but the undocumented credential-bearing CLI path raises medium security concern.