prism

SUSPICIOUS. The skill's capabilities largely match its stated purpose as a Solana liquidity agent, but it enables autonomous live trading with private-key-based wallet access and depends on external CLIs/runtimes whose trust must be extended beyond the skill itself. No clear credential theft or covert exfiltration is shown, but unresolved `prism` binary provenance plus third-party runtime integration and real-money action make this a high security-risk skill.