ranger-finance

SUSPICIOUS: the skill is internally consistent as a Solana perps trading integration guide, and the flagged scanner items are mostly documentation artifacts. However, it enables autonomous leveraged trading and encourages use of a raw wallet private key for signing, so the overall security risk is high despite low evidence of malware or credential theft.

The shown fragment appears to be trading-agent documentation and example code, not malware. It contains legitimate MCP portfolio monitoring and trading functionality. The primary risk is that arbitrary conversational input can reach an LLM with tools capable of modifying positions, while confirmation is only requested in the system prompt. External review and deterministic authorization are required before production use. No malicious behavior is evident in this fragment.