eu-sparql-search

SUSPICIOUS. The core purpose and official EU data flows are coherent and there is no credential harvesting or untrusted installer, but the skill is internally inconsistent: it claims a narrow WebFetch/Read scope while directing the agent to bypass those limits with bash_tool/curl, and it recommends disabling TLS verification. This looks more like an overreaching or unsafe skill than malware.