solana-token-verification

SUSPICIOUS: the stated purpose is plausible, but the skill is mostly a wrapper that installs and relies on a third-party GitHub CLI from another org, with unclear setup/auth requirements and opaque backend data flows. No direct evidence of malware or credential theft is present, but install trust and service indirection are disproportionate enough to merit caution.