percolator-bounty

SUSPICIOUS: the core Solana keeper/oracle capabilities match the stated purpose, but the skill enables autonomous mainnet actions with a local keypair, routes all activity through an arbitrary RPC, and has weak publisher/registry provenance in the supplied evidence. No confirmed malware or overt exfiltration is visible, but the operational and trust risks are material.