solana-easy-swap

SUSPICIOUS/HIGH-RISK but not confirmed malicious. The skill’s capabilities match its stated purpose, and the visible network destinations are consistent with Solana/Jupiter swapping, but it gives an AI agent power to execute cryptocurrency trades and requires direct access to a wallet private key. That combination is proportionate to the task yet high impact, so this should be treated as a vulnerable high-risk financial automation skill rather than benign tooling.