injective-funding

SUSPICIOUS: the skill's wallet-funding purpose matches its capabilities, and data flows are mostly aligned to official Injective APIs. However, it enables autonomous crypto transfers and depends on an npm SDK with a documented malicious release history while passing a private key into that SDK, so version pinning and dependency trust are critical.