coinbase-agentkit

Purpose and capabilities are largely aligned, and install sources are official Coinbase/npm channels, so this does not look malicious. However, the skill is inherently high-impact because it equips AI agents to perform autonomous financial transactions and public social actions using sensitive credentials; safe deployment requires strict approval gates, scoped keys, and careful handling of private keys and wallet exports.