nasdaq-data-link

SUSPICIOUS: the skill is coherent as a Nasdaq integration, but it depends on a third-party CLI and proxy layer that handles authentication and routes API traffic outside Nasdaq's native flow. The npm install source is legitimate, so this is not confirmed malware, but the intermediary trust model and unpinned `@latest` CLI create medium security risk.