crypto-address-checker

SUSPICIOUS. The stated purpose is plausible, but the actual install path is an unpinned remote npm execution and the available evidence shows transparency gaps: possible hidden installer files, publisher identity mismatch, and inconsistent network-flow claims. No direct credential theft or confirmed malware is visible in the provided snippet, but the skill's trust footprint is larger and less coherent than advertised.