wallet

SUSPICIOUS: the skill’s blockchain wallet capabilities match its stated purpose, and the Foundry install path appears official. However, it handles decrypted private keys in plaintext, mandates an unreviewed local proposal wrapper, and enables high-impact on-chain actions; this is coherent but materially risky.

No clear malicious code is present in this module. It is a high-privilege Safe transaction automation client that signs and submits EIP-712 SafeTx proposals using a PRIVATE_KEY from environment variables. The main security risk is abuse/tampering risk at runtime: attacker-controlled environment variables (TX_TO/TX_DATA or DEPLOYMENT_BYTECODE) would cause the module to authorize and propose attacker-chosen Safe actions to the tx-service for subsequent user approval.

This is a non-obfuscated bootstrap wrapper that primarily increases supply-chain risk rather than showing direct malicious code. Its main security concern is that it performs a runtime `npm install` (which can execute dependency lifecycle scripts) into a persistent user-writable cache directory and then executes the cached `propose.mjs` from there, with no integrity/provenance verification visible in the wrapper. If the cache directory or package sources can be tampered with, the executed code path could be attacker-controlled; otherwise, risk is moderate and depends on dependency pinning/verification handled elsewhere.