wallet-tracker-mcap

SUSPICIOUS: the skill is purpose-aligned and the onchainos dependency appears same-org official, so there is no clear evidence of credential theft or covert exfiltration. However, it enables bounded but autonomous live crypto trading, which is inherently high risk for an AI agent and warrants caution despite the paper-mode default and confirmation gates.