deploy-to-mainnet

SUSPICIOUS. The core Solana deployment guidance is coherent with the stated purpose, but the telemetry design is not fully clean: it performs a remote POST using a dynamically configured endpoint before consent is established in the workflow, and the destination cannot be verified from the skill itself. This is not fundamentally incompatible with the skill's purpose, so it is not malicious, but the remote telemetry flow and transitive community-skill handoff make it higher risk than a purely local documentation/workflow skill.