pp-kalshi

SUSPICIOUS: purpose and capabilities largely align, and the installer appears to be publisher-controlled, but this skill still carries meaningful risk because it requires trusting an external CLI, includes unpinned fallback installs, accepts trading credentials, and can perform financial actions. No clear evidence of malware, stealth, credential theft, or off-purpose exfiltration was found.