venice-x402

SUSPICIOUS: the skill is mostly aligned with its stated Venice wallet-credit purpose and uses official Venice API endpoints, but it enables real financial transactions, forwards wallet private keys into installed packages, and recommends a deprecated third-party x402 package for signing. Not malware, but high operational risk unless every top-up is explicitly user-approved and dependencies are pinned/reviewed.