atxp

SUSPICIOUS: the skill’s broad wallet, messaging, and paid-action footprint matches its stated purpose, and its data flows appear to stay within ATXP-operated domains, so this is not confirmed malware. However, it enables autonomous financial and communication actions, uses runtime `npx @latest` execution, stores a powerful credential locally, and recommends transitive skill installs, making the overall security risk medium-high despite good documented guardrails.