hodlmm-range-keeper

BENIGN for purpose alignment and data flow: the skill does what it claims, using vendor-documented API endpoints and expected wallet/signing permissions for DeFi LP management. However, it is inherently HIGH security risk because it enables autonomous mainnet fund-moving actions through MCP tools; the main concern is financial impact from automation, not malware or credential theft.