pandadata-api

SUSPICIOUS: the core documentation and SDK-routing purpose is plausible, and installs use normal PyPI paths, but the skill also expands into live credential setup and real API execution against an arbitrary configured base URL. That makes its footprint broader than a simple reference skill and leaves endpoint trust unresolved, though there is no clear evidence of overt malware or hidden exfiltration.