jupyter-notebook

SUSPICIOUS: the skill’s purpose is coherent, but its actual footprint includes executing unverifiable third-party code from a personal GitHub repo and weakening Jupyter security by disabling auth and XSRF protections. No clear credential exfiltration is shown, but install trust and local exposure are high enough to classify as suspicious rather than benign.