nara

The skill is mostly aligned with its stated Nara-chain purpose and uses an official-looking npm/GitHub distribution path, so it is not overtly malicious. Risk is still material because it enables on-chain financial actions, recommends mutable `npx` execution, processes external quest content in an action loop, and instructs transitive installation of another skill.