kev-status

SUSPICIOUS. The skill’s purpose is coherent, but its paid path depends on a directly downloaded, unverifiable script that receives a plaintext wallet private key. That makes the capability disproportionate to a simple KEV lookup and creates a high supply-chain and credential-forwarding risk even though there is no clear evidence of confirmed malware.