clanker-plugin

SUSPICIOUS. The stated purpose matches crypto token deployment/claim operations, and the confirmation gates are stronger than typical wallet skills. But the skill’s footprint is disproportionately broad: it auto-installs multiple other skills and tools, fetches mutable scripts, and relies on a downloaded core binary not included for review. Data flows generally point to OKX/GitHub rather than an unrelated exfiltration endpoint, so this is not confirmed malware, but it is a high-risk skill due to supply-chain and transitive-trust exposure combined with real-money blockchain actions.