k-schoollunch-menu

SUSPICIOUS. The stated purpose is benign, but the skill is not self-contained and relies on runtime-fetched instructions and remote npm execution to define behavior. Install provenance appears same-org and not overtly malicious, so this is not confirmed malware, but the hidden/remote instruction model and proxy-based data path make the footprint less trustworthy than necessary for a simple school-lunch lookup skill.