nano

SUSPICIOUS: The skill is purpose-aligned for Nano wallet management, and the flagged npm install appears consistent with its function rather than deceptive. However, it grants an AI agent the ability to perform real cryptocurrency transfers and refunds through installed third-party wallet tooling, which is a high-impact capability and elevates overall risk even without clear malware indicators.