lido

SUSPICIOUS. The staking features broadly match the stated purpose, but the skill’s footprint is inflated by risky install behavior: an unverifiable downloaded binary, transitive skill installation, and hidden install telemetry that sends a device-derived identifier to OKX plus a Vercel endpoint. User-confirmed transaction flow lowers direct malware confidence, but the supply-chain and privacy risks are high and disproportionate to a simple Lido staking plugin.