phantom-wallet-mcp

SUSPICIOUS: the skill is purpose-aligned and uses an official-looking npm package and Phantom endpoints, so it is not clearly malicious. However, it grants an AI agent direct wallet and signing capabilities for multi-chain financial actions, making the overall risk high despite otherwise coherent setup and data flows.