emblem-ai-agent-wallet

BENIGN but high-impact. The skill’s capabilities are largely consistent with its stated purpose as a wallet-management integration, and the install path is a normal pinned npm package rather than a suspicious remote installer. The main concern is inherent: it gives an agent access to sensitive wallet state and potential financial actions through an external CLI, so security risk is elevated even without signs of malicious intent.