net-dns-lookup

SUSPICIOUS: the DNS lookup purpose is coherent, but the skill’s actual footprint is larger than needed because it asks the agent to download and run remote code and optionally hand a blockchain private key to that code for off-chain payment signing. Same-domain hosting reduces outright maliciousness, but the combination of mutable installer + credential forwarding + real financial authorization makes this high risk for an AI agent skill.