wallet-cli

SUSPICIOUS: the skill is mostly coherent with its stated purpose and uses an official install path, but it enables high-impact autonomous crypto operations and forwards wallet secrets into a CLI via stdin. No clear credential theft, hidden exfiltration, or mismatched data routing is shown, so this is not confirmed malware; the main concern is operational and financial risk inherent to the skill’s scope.