nts-tax-delinquency

SUSPICIOUS. The stated purpose is plausible and the publisher/source relationship appears same-org and legitimate, so this is not confirmed malware. However, the skill is largely a remote instruction loader: its actual behavior is delegated to an external CLI and mutable GitHub content, with an update path that can install additional skills. That transitive trust and limited static transparency make the skill medium risk despite no clear credential harvesting or exfiltration in the reviewed stub.