space-earth-science-explorer

SUSPICIOUS. The core capability is coherent for a hosted science-search tool, and there is no direct credential theft or local execution in this skill. Risk comes from the hosted intermediary model for public data, the dependency on AgentPMT account setup despite 'no credentials' upstream claims, and especially the transitive installation of additional skills through third-party CLI paths.