kakao-map

SUSPICIOUS: the visible purpose is mapping/directions, but the skill hides core behavior behind an external npm CLI and explicitly routes Kakao requests through a non-official proxy with no user key. Same-publisher packaging lowers pure supply-chain concern, yet proxy-mediated data flow and off-skill instruction delegation make the footprint broader and less trustworthy than a normal Kakao integration.