government-support-survey

SUSPICIOUS. The stated purpose is benign, but the skill defers its real behavior to a runtime-fetched npm CLI and GitHub content instead of embedding auditable instructions. This is mainly a transitive-trust and supply-chain risk, not confirmed malware.