lang-bcp47

SUSPICIOUS. The core API purpose is coherent, and the network destination matches the stated service, but the skill couples a simple language-tag validator to a downloaded helper script and a plaintext blockchain private key. That combination is disproportionate for the task and creates significant supply-chain and credential-forwarding risk, even without clear evidence of intentional malware.