kamino-liquidity-plugin

SUSPICIOUS: the skill’s crypto-trading purpose matches its wallet and Kamino capabilities, and it includes meaningful confirmation gates, but its footprint is still high-risk because it installs external binaries/scripts, relies on a third-party skills installer for transitive skill loading, and enables real on-chain financial actions. No clear credential theft or covert exfiltration is shown, so this is not confirmed malware.