solar-twilight-windows

SUSPICIOUS. The core solar API purpose is coherent, but the skill’s install and execution path is not proportionate: it asks the agent to download and run an unpinned remote script, then provide that script a plaintext wallet private key for real payment authorization. The service endpoints appear consistent with the stated product, but trust in the primary client is too weak for the credential and financial scope it receives.