recover-eco-funds

The skill is purpose-aligned and mostly routes data to expected Circle/Eco components, so it does not show clear malicious intent. However, it is still high-risk because it authorizes real fund movements and depends on unreviewed helper scripts plus Circle session/signing flows; that makes it vulnerable/sensitive rather than benign.