botchain-nodes

SUSPICIOUS. The skill’s node-operations scope mostly matches its stated purpose, and there is no clear credential theft or exfiltration. However, it asks the agent to clone and run deployment scripts/binaries from a repo whose ownership and availability are not verifiable from the evidence, so install trust is weak and drives a high security risk.