allium-x402

SUSPICIOUS. The skill’s purpose mostly matches its blockchain-data functionality, and the domains appear same-org, but it expands trust by raw-downloading skill files, dynamically fetching more instructions, reading local credentials, and enabling automatic wallet-signed micropayments. This is not confirmed malware, but it has meaningful supply-chain, credential-handling, and autonomous-action risk.