agent-payment-x402

SUSPICIOUS: the skill’s purpose matches payment execution, but its footprint is inherently high risk because it enables autonomous financial actions and passes a wallet private key to a third-party MCP/payment package. Data flows are mostly consistent with the stated purpose and not overtly malicious, but the combination of crypto payments, external package execution, and credential forwarding makes the skill unsuitable for low-trust environments.