pump-analyzer-solana

SUSPICIOUS. The skill’s runtime behavior mostly fits its stated Solana monitoring purpose, but install/execution trust is inconsistent: ara.so branding does not match the personal GitHub distribution, and the repo reportedly references a different repo altogether. That mismatch is the main risk driver; data flows otherwise look largely proportionate and there is no clear evidence of credential theft or malicious payloads in the shown code.