four-meme-ai

SUSPICIOUS. The skill is internally consistent with its stated purpose, but that purpose is inherently high risk: it gives an AI agent broad cryptocurrency trading and transfer powers using a raw private key. Install provenance looks plausible via npm and a public repo, and no clear exfiltration endpoint is shown, so this is not confirmed malware; however, the combination of private-key handling and autonomous on-chain actions makes the overall security risk high.