solana-payments-wallets-trading

SUSPICIOUS. The skill is broadly consistent with its stated crypto-wallet and trading purpose, and the CLI install path appears to use an official same-org npm package rather than an unknown binary. However, the skill enables autonomous real-world financial actions using local private keys, supports arbitrary URL fetching with x402 auto-payment, and prefers mutable `npx @latest` execution. This is not confirmed malware, but it is a high-risk agent skill because its legitimate purpose itself carries significant transaction, payment, and key-handling consequences.