solana-payments-wallets-trading

SUSPICIOUS: the skill's capabilities match its stated crypto purpose, but that purpose itself grants an AI agent broad power to move funds, trade, borrow, and pay remote services using local private-key-backed wallets. The main concerns are autonomous real-world financial actions, sensitive wallet handling, arbitrary paid fetches, and unpinned `npx @latest` execution rather than hidden exfiltration or clear malware.