solarwinds-logs

SUSPICIOUS. The skill's purpose is coherent for log search, and the token scope is proportionate, but its core operation relies on an unverified external CLI installed from a skill-local source and then given a bearer token. That unverifiable credential-forwarding path is the main risk; the prompt-injection finding looks benign.