meteora-plugin

SUSPICIOUS: the skill’s Solana DEX functionality is aligned with its purpose, but its footprint is high risk because it installs multiple remote components, adds other skills transitively, downloads an unverified executable, and can execute real financial transactions. The behavior looks coherent rather than overtly malicious, but it should be treated as a high-risk skill due to supply-chain and wallet-action exposure.