alby-bitcoin-payments

SUSPICIOUS: the skill is coherent with its stated Bitcoin/payment purpose and uses a plausibly official npm package, but its footprint is inherently high risk because it enables autonomous financial transactions and routes some payments/data through third-party services like l402.space. The main concern is not hidden malware behavior; it is the combination of wallet credentials, remote CLI execution, paid API discovery, and real-money actions.