pay-with-any-token

SUSPICIOUS. The skill is purpose-aligned for blockchain payments, and the Tempo installer appears same-org rather than a random payload, so this is not confirmed malware. However, it combines remote installer execution, third-party APIs, wallet/key handling, and autonomous transaction workflows; that footprint is high-risk and disproportionate for routine agent use even with explicit confirmation gates.