ljg-map

SUSPICIOUS: The core behavior fits the stated purpose of researching and rendering an industry map, but the workflow relies on a cross-skill local script and an unspecified image backend, creating supply-chain and transitive-trust risk. No direct credential harvesting or clear exfiltration is shown, so this is better classified as a medium-risk vulnerable skill rather than malicious.