base-mcp

SUSPICIOUS: the core Base wallet purpose is real, but the skill’s footprint is unusually broad and includes many third-party plugins, hosted MCPs, shared API credentials, and external CLI/package execution paths. Most behavior is disclosed and aligned with wallet automation rather than covert malware, yet the combination of transitive installation, credential/signature forwarding, and high-trust third-party dependencies makes this a high-risk skill.