wrds

SUSPICIOUS. The WRDS/SSH/PostgreSQL capabilities are proportionate to the stated research purpose and data flows stay on official WRDS infrastructure, but the skill contains a real load-time pre-execution command that runs an unverified local helper (skill-toc/plugin-utils). That same pre-load execution path, plus a transitive reference to another skill, makes install trust materially weaker even though there is no clear credential theft or malicious exfiltration behavior in the visible content.