monero-wallet

SUSPICIOUS: the publisher/domain relationship appears internally consistent and the documented data flow is local to `127.0.0.1`, so this is not confirmed malware. However, the skill grants an AI agent the ability to perform irreversible cryptocurrency transfers via a third-party gateway stack and documents unsafe CLI secret handling, making the overall security risk high even without direct exfiltration evidence.