climate-environment-and-land-data-hub

SUSPICIOUS. The skill's purpose is coherent, but it routes all access through AgentPMT rather than direct World Bank APIs and instructs users to install additional setup skills, creating third-party trust and transitive-install risk. No clear malware behavior is visible in this skill alone, but the hosted proxy model and expanded trust chain make it higher risk than a direct read-only data integration.