harvard-artifacts-etl-analytics

SUSPICIOUS: the core ETL/dashboard behavior is coherent and credentials/data flows are proportionate, but the install trust is weakened by a publisher/source mismatch: ara.so presents the skill while the code is pulled from an unrelated personal GitHub repo with no verifiable same-org linkage or release trail. No strong evidence of malware or credential harvesting is present, but the provenance inconsistency makes the skill medium risk rather than benign.