jk-sdk-setup

SUSPICIOUS due to install inconsistency: the skill’s purpose and credential scope are appropriate, and data flows appear to target official Jinkō APIs, but the stated install command likely names the wrong PyPI package. That mismatch materially raises supply-chain risk even without evidence of malicious intent.