meteora-plugin

SUSPICIOUS: the skill’s capabilities match its stated Solana trading purpose, and data flows mostly point to official Meteora/Solana/OKX endpoints. However, it installs multiple external components, including a binary-only plugin and transitive skills, then enables real-money on-chain actions; this makes the overall footprint high risk even without clear evidence of credential theft or covert exfiltration.