harvard-artifacts-data-engineering-analytics

SUSPICIOUS. The functional scope is coherent for a data-engineering skill and data flows target official Harvard API endpoints, but install trust is weakened by a publisher mismatch: the skill is presented as ara.so while directing users to clone a personal GitHub repo with no clear verifiable relationship. This is not confirmed malware, but it carries medium supply-chain risk.