harvard-art-museums-data-pipeline

SUSPICIOUS. The skill’s functionality is broadly aligned with its stated museum ETL purpose and uses official Harvard API endpoints, but trust is weakened by a publisher mismatch and installation from a personal GitHub repo with weak provenance and inconsistent packaging. Overall this looks like a plausible data-engineering demo with moderate supply-chain and SQL-construction risk, not confirmed malware.