solana-agent-kit

The skill is coherent with its stated purpose and appears to reference the official Solana Agent Kit npm ecosystem, so it is not malware. However, it is a high-risk skill because its intended function is to give an AI agent autonomous control over cryptocurrency actions using wallet credentials, including trading and transfers. Risk comes from scope and real-world financial autonomy, not from deceptive data exfiltration.