agentpay

SUSPICIOUS. The skill is internally coherent for a crypto payment/trading agent and mostly uses purpose-aligned capabilities, but its footprint is inherently high risk: it installs and relies on an external wallet CLI, performs autonomous financial actions, can call paid third-party services and send email, and ingests untrusted external content while retaining action authority. I found no confirmed malware or hidden exfiltration, but the combination of wallet control, payment execution, owner-mode capabilities, and transitive skill installation makes this a high-security-risk skill.