bls-series

SUSPICIOUS. The skill’s purpose is plausible, but its actual footprint is broader than necessary: public BLS data is proxied through a third-party paid gateway, a raw helper script is downloaded and executed, and a blockchain private key is introduced for access to otherwise public statistics. The warnings and spend cap mitigate intent concerns, but the install trust and credential-forwarding model make this a medium-high risk skill.