database-lookup

SUSPICIOUS: the core purpose is coherent with direct querying of public databases, and network flows are mostly to official endpoints. However, the skill is broader than necessary, instructs the agent to read local .env secrets, and combines untrusted external content retrieval with shell-based curl execution, creating medium security risk even without clear malicious intent.