opensea

SUSPICIOUS. The skill is purpose-aligned and mostly uses official OpenSea infrastructure, so it does not look malicious. However, it enables autonomous financial/blockchain actions and routes signing or tool calls through external providers and arbitrary third-party tool endpoints, which makes the overall security risk high even though intent appears legitimate.

SUSPICIOUS due to high-impact autonomous financial capability, but not because of deceptive install or exfiltration behavior. The skill is internally aligned with OpenSea trading, uses official-looking distribution channels, and routes data to expected services; risk comes mainly from granting an AI agent wallet-backed authority to approve and execute real NFT transactions.

SUSPICIOUS: the skill is internally consistent and uses mostly official, verifiable sources, so it is not confirmed malicious. However it handles high-value wallet credentials and enables autonomous signing for real asset transactions; Bankr introduces extra third-party trust, and local private-key mode materially increases impact if the agent environment is compromised.