Are there legal risks involved in holding money in a PayPal account on behalf of an unrelated third party?

This would constitute as you acting as a Money Transmitter and yes, this is against PayPal AUP rules (actually requires pre-approval) and would also require you to get licensed for it by the State in which you work in.

PayPal Acceptable Use Policy - See under activities requiring pre-approval.