sodax-wallet-sdk-core

SUSPICIOUS. The skill’s purpose and capabilities largely align for a wallet-provider integration guide, and its install footprint is mostly standard npm-based documentation. Risk is elevated because it handles wallet secrets, enables transaction broadcasting, and instructs loading additional skills; combined with unpinned dependency guidance and the historical compromise of an Injective SDK release, this is higher-risk than a normal framework doc skill but not confirmed malware.

BENIGN in purpose alignment and install trust, but HIGH security risk overall because the skill enables private-key based cryptocurrency signing and broadcast, including automated bot/CI flows. No clear malware or credential-exfiltration behavior is present, yet the real-world financial action surface is inherently sensitive.