solar-nexus

SUSPICIOUS. The skill’s basic functionality matches its stated Solar Nexus purpose, but it routes authentication and API activity through Membrane rather than directly to Solar Nexus. The install source is legitimate npm and publisher-aligned, so this is not malware, but the intermediary auth/data flow and unpinned external CLI make the trust footprint broader than a normal direct API integration.