url-expand

SUSPICIOUS. The core purpose is coherent, but the skill expands scope by requiring remote helper-code execution and optionally a blockchain private key for payment. The main risk is not the URL-expansion API itself; it is the unverifiable downloaded client script that is then trusted with signing authority and spending controls.