agent-payment-x402

SUSPICIOUS: The skill’s payment and wallet capabilities align with its stated purpose, and it includes sensible guardrails like pinned versions, spending policies, and explicit confirmation guidance. The main concern is that it forwards a wallet private key to a third-party MCP package executed via npx/npm, while provenance for agentwallet-sdk is only partially verified; combined with autonomous payment capability and transitive installation of another skill, this creates medium-high security risk without enough evidence for confirmed malware.