ocean-genomics

SUSPICIOUS: the scientific purpose is coherent, and most capabilities fit bioinformatics work, but the skill expands trust beyond its stated scope by instructing transitive installation of multiple external skills and using an unpinned MCP package (`@latest`). No direct credential theft or exfiltration is evident, so this looks more like medium supply-chain/trust risk than malware.