morpho-plugin

SUSPICIOUS: the skill’s purpose and data flows mostly align with Morpho lending operations, and the installer sources are plausibly same-org OKX infrastructure rather than random third parties. However, it combines download/execute behavior, transitive skill installation, and autonomous on-chain approval broadcasts with real financial impact, making the operational risk materially higher than a typical documentation or read-only integration skill.