kaleido

SUSPICIOUS: the install path is relatively trustworthy, but the skill is internally inconsistent. Its description mixes Kaleido rendering with blockchain organization-management actions, and it routes authenticated API traffic through Membrane as an intermediary rather than directly to official Kaleido endpoints. This is not confirmed malware, but the purpose-capability mismatch and proxy-based data flow make the skill medium risk.