carbium

SUSPICIOUS: the core integrations and data flows are largely coherent with the stated Solana infrastructure purpose, and I found no clear malware or deceptive third-party proxying. However, the skill materially enables autonomous crypto trading and transaction execution, including sniping and MEV workflows, which creates high real-world action risk even though the install/data-flow story is mostly legitimate.

No explicit malware is evident. The principal security risk is blindly signing and submitting an API-provided transaction; verify its instructions, programs, accounts, and expected swap constraints before signing. Protect API credentials and avoid exposing RPC keys through URL logging.