lido-plugin

Purpose and capabilities mostly align: this is a crypto staking skill that performs crypto staking actions. The main risk is supply chain and transitive trust, because it installs multiple external components and an opaque prebuilt plugin binary before use. Financial impact is real, but the skill includes explicit confirmation and preview controls rather than covert behavior. Overall: suspicious/high-risk from install trust, not confirmed malware.