yebigun-training

SUSPICIOUS. The stated purpose is narrow and mostly benign, and the hard rules are consistent with a read-only government-site lookup workflow. However, the skill’s real behavior depends on executing a remotely fetched npm CLI and following dynamically printed instructions, which is broader trust than the local skill text suggests. This looks more like a supply-chain and remote-instruction integrity issue than confirmed malware.