hodlmm-arb-executor

SUSPICIOUS: the skill is purpose-aligned and uses largely consistent official endpoints, so it does not look like credential theft or covert exfiltration. However, it gives an AI agent autonomous, write-capable DeFi trading powers on mainnet with wallet-backed fund movement, which is intrinsically high risk and inappropriate to treat as benign despite the documented safety caps and --confirm gate.