agentwallet

SUSPICIOUS: The skill is broadly aligned with a hosted agent wallet, but its footprint is high-risk by nature: it reads a local API-token file, forwards that token to a central service, and proxies arbitrary paid API requests through Frames. No malware or hidden execution is evident, and there is no binary install path in the skill itself, but the combination of credential handling, intermediary payment proxying, and autonomous-capable financial actions makes this a medium/high security-risk skill that should only be used with strong user approval and trust in Frames.