data-normalization-tool

SUSPICIOUS: the skill’s stated purpose is vague and lightweight, but it grants broad Python and pip execution that can modify the environment and install arbitrary packages without naming any concrete trusted toolchain. There is no direct malware, credential theft, or exfiltration behavior shown, but the capability footprint is broader than necessary for the documented purpose.