payram-agent-onboarding

SUSPICIOUS. The skill's payment and wallet capabilities broadly match its stated purpose, but its footprint is high risk: it uses a remote download-and-execute installer without visible verification and enables autonomous financial operations, secret handling, and contract deployment. No clear evidence shows credential exfiltration to unrelated domains, so this is not confirmed malware, but it is a risky skill that should be treated with caution.