jupyter-live-kernel

SUSPICIOUS: the skill's core behavior fits its stated purpose, but its footprint is broader than a simple local helper because it runs unpinned third-party code from a personal GitHub repo and instructs the agent to start JupyterLab with authentication disabled. Data flow appears local and there is no clear credential harvesting or exfiltration, so this is not malicious, but the install and auth model create material security risk.