emblem-ai

The skill is broadly aligned with its stated crypto/auth developer purpose and uses plausible npm-based distribution, so it is not malware. Its main risk is high-impact capability: wallet signing, AI-assisted trading flows, and app introspection create meaningful security exposure even when framed as opt-in developer tooling.