transact

SUSPICIOUS: The skill’s capabilities fit its stated purpose as a Convex transaction helper, but it handles highly sensitive signing inputs and can perform autonomous blockchain state changes. Main risk is credential forwarding to non-public MCP backends and real-world transaction execution, not malware or deceptive install behavior.