agentcash-wallet

SUSPICIOUS: the skill's wallet/payment behavior matches its stated purpose, but it carries elevated risk because it enables automatic spending, broad outbound requests to arbitrary x402 origins, and real-world actions through paid APIs. Install trust is only moderately reassuring due to same-vendor but unpinned npx/MCP setup; this looks more like a high-risk wallet/integration skill than confirmed malware.