kamis-food-price

SUSPICIOUS. The stated purpose is narrow and read-only, but the published skill stub does not contain the real instructions; it tells the agent to execute a same-project npm CLI and trust runtime-fetched guidance. Install provenance is better than a random downloader because it uses the official npm registry and same-org GitHub docs, so this is not clearly malicious. However, the combination of mutable remote instructions, partial version pinning, and proxy-mediated data flow makes the skill less transparent and raises medium security risk relative to its simple lookup purpose.