kev-recent

SUSPICIOUS: the skill’s purpose and API behavior are coherent, but it relies on direct download-and-execute of a same-domain helper script and optionally uses a raw blockchain private key for paid calls. This looks like a plausible metered API skill, not confirmed malware, but the install trust and credential-forwarding model create medium risk.