authenticate-wallet

SUSPICIOUS: the skill’s purpose and command scope are mostly coherent for wallet login, and evidence points to an official Coinbase-associated package and docs. However, it relies on mutable `npx ...@latest`, forwards OTP credentials through a non-public CLI, and installs additional opaque runtime components, creating meaningful supply-chain and credential-handling risk without clear proof of malicious intent.