solar-sun-position
Warn
Audited by Socket on Aug 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated solar-data purpose is coherent, but the skill couples it to a remote-downloaded helper that handles a blockchain private key and authorizes spending. That install and credential flow is disproportionate for a simple API client and creates high supply-chain and wallet-theft risk even if the service itself is legitimate.
Confidence: 84%Severity: 85%
Audit Metadata