agent-id-proxy

SUSPICIOUS: the core proxy behavior is mostly aligned with the stated purpose and does not obviously harvest credentials via third-party relays, but the skill is high impact because it centralizes vault secrets, broadens agent network permissions with Bash(curl:*), and enables autonomous blockchain transactions, payments, and trading. Main risk is overbroad execution scope and financially consequential signing rather than confirmed malware.