aoconnect

SUSPICIOUS: the skill mostly matches its stated AO blockchain purpose, but it expands trust through remote skill installation, requires direct access to a sensitive wallet file, allows arbitrary node endpoints, and appears to support dynamic callback code. This is not confirmed malware, but it is a medium-risk skill with meaningful credential and real-world action exposure.