solana-mcp-vybe

SUSPICIOUS. The skill's high-level purpose is coherent, but it relies on a third-party hosted MCP intermediary and an external npm bridge, and the authentication/data-flow description is internally inconsistent with the prior evidence. This looks more like a medium-risk trust and credential-forwarding issue than confirmed malware.