harvard-art-museums-etl-analytics

SUSPICIOUS but not malicious. The skill's capabilities broadly match its ETL/dashboard purpose and its data flows target official Harvard API endpoints plus a user-specified database, but the install source is an unrelated personal GitHub repo rather than the stated publisher and dependencies are unpinned, creating meaningful supply-chain trust risk.