vara-eth-app-builder

SUSPICIOUS: The skill's capabilities mostly match its stated Vara.eth app-building purpose, but it carries medium risk because it instructs installation of external tooling from non-registry sources, handles private keys for signing, and enables autonomous blockchain actions with financial/operational consequences. No clear credential harvesting, covert behavior, or third-party exfiltration is evident from the provided text.