request-payment

SUSPICIOUS: the workflow is internally coherent for a payment-request skill, but it authorizes the agent to solicit real cryptocurrency from the operator, which is a high-impact autonomous financial action. There is no explicit malware pattern, credential theft, or suspicious installer, but the hidden wallet tooling and real-money scope make this a medium/high security risk skill.