helius

Mostly coherent Helius/Solana developer skill using same-org official tooling, with the scanner’s command-injection alert appearing false-positive. Main risk is not malware but scope: the skill enables autonomous financial and billing actions plus webhook creation, and uses mutable `npx @latest` installs. Suspicious only from a safety/risk standpoint, not from clear malicious intent.