nano

SUSPICIOUS. The skill is largely aligned with its stated Nano-wallet purpose and avoids direct secret export, but it combines direct npm-executed wallet tooling with autonomous cryptocurrency actions that can move real funds. Public RPC/proxy routing is proportionate for a wallet workflow but still exposes wallet activity to third-party endpoints. This looks more like a high-risk financial automation skill than confirmed malware.