ton-cli

SUSPICIOUS: the skill is coherent with its stated TON wallet purpose and appears to use an official npm/GitHub distribution path, so it is not clearly malicious. Risk is still substantial because it executes mutable alpha package code via npx, handles wallet secrets, reads local wallet config, and enables autonomous signing/broadcast of financial transactions.