helius

SUSPICIOUS: The skill is largely coherent with its stated Solana/Helius purpose and uses official same-org install sources, so it does not look malicious. However, it materially expands agent capability via MCP installation, forwards API keys into external tooling, and enables autonomous on-chain payments, transfers, and billing actions, making the overall security risk high despite good publisher consistency.