controller-backend

SUSPICIOUS: The skill is largely coherent and uses official Cartridge/Starknet components, so it does not look like credential theft or disguised malware. However, it enables autonomous blockchain transactions and token approvals with backend-held signing keys and persistent sessions, making it high-risk in operation despite mostly benign install and data-flow characteristics.