leapcat-wallet

The skill is purpose-aligned for wallet management, but it grants an AI agent the ability to initiate cryptocurrency withdrawals after reauthentication. That financial autonomy makes it high risk even without clear signs of malware or exfiltration. The external CLI dependency is also insufficiently documented from a trust/provenance perspective.