chinese-calendar

SUSPICIOUS. The skill’s stated purpose is benign and locally scoped, but the install path relies on transitive skill installation from an unverified personal repo, and the unseen Python requirements add supply-chain uncertainty. No direct credential harvesting, exfiltration, or disproportionate capabilities are described.