position-manager

SUSPICIOUS/medium risk rather than malicious: the skill’s capabilities match its stated Solana LP-management purpose, and its confirmation/simulation rails are coherent. The main concern is transitive trust and real-world financial impact from delegated Solana/Jupiter skills and remote MCP/execute-on-fetch patterns, not clear credential theft or deceptive data routing.