base-mcp

SUSPICIOUS. The skill largely matches its stated crypto-wallet purpose and uses same-org Base docs/endpoints, so it does not look malicious. However, the declared read-only mode conflicts with its write/payment capabilities, it depends on a transitive third-party skills installer, and it enables high-impact financial actions, so the overall risk is medium and warrants caution.