meteora

SUSPICIOUS. The skill’s Solana trading purpose matches its capabilities, but its footprint is larger than necessary: it installs extra skills, downloads an opaque binary, and sends install telemetry to third-party endpoints including a Vercel app. Because an unverifiable executable is central to operation and can drive wallet-related actions, the overall security risk is high even without proof of outright malware.