sp3nd

SUSPICIOUS: the skill’s data flows are mostly consistent with its shopping purpose and there is no clear malware or credential-exfiltration pattern, but it grants an AI agent the ability to autonomously spend crypto on real-world goods and submit irreversible on-chain payments. Combined with stored API secrets, PII handling, and unpinned blockchain dependencies, this makes the skill high risk even though the install path is relatively standard.