commerce-and-trade-competitiveness-data-hub

SUSPICIOUS. The skill’s stated purpose largely matches its behavior, but it routes public-data queries through AgentPMT rather than official World Bank APIs and requires transitive installation/setup of other AgentPMT skills. That makes it a coherent hosted integration with medium trust and data-flow risk, not confirmed malware.