agent-payment-x402

SUSPICIOUS: the skill's payment capability matches its stated purpose, but it grants an AI agent autonomous financial action and forwards a wallet private key into third-party npm code whose publisher relationship is not clearly same-org with the referenced protocol/ecosystem. This is a coherent but high-risk payment skill, not confirmed malware.