setup-harmony-remote-tool

SUSPICIOUS. The skill's capabilities broadly match its purpose, but it asks the agent to install and use external tooling, including a direct wheel from a project-hosted domain and a service hosted on onrender.com. Data flows appear aligned to ToolUniverse setup/sharing rather than obvious exfiltration, but install-trust and credential-handling scope are significant enough to rate this medium risk.