hiero-cli

BENIGN in purpose alignment and install provenance, but HIGH security risk overall because the skill handles private keys and enables autonomous blockchain payments/transfers. No clear malware or hidden exfiltration is present, yet the real-world financial impact and credential sensitivity make this a risky skill to grant an agent.