@2405/sol-scalper

SUSPICIOUS: the stated purpose fits a trading alert skill, and there is no visible malicious installer or obvious credential-harvesting route in the provided markdown. However, the real behavior is concentrated in unseen local scripts that likely perform network access and possibly handle sensitive Hyperliquid credentials, and the skill enables recurring finance-related automation. Risk is medium due to unverifiable implementation, not confirmed malware.