harvard-art-museums-data-engineering-analytics

SUSPICIOUS. The skill's capabilities and credential scope are broadly consistent with ETL/dashboard work, and data flows go to the official Harvard API and a user-chosen database. The main concern is install trust: the publisher points users to clone and run a personal GitHub repo from a different owner with limited provenance, which is disproportionate to the claimed curated skill origin but not enough to show confirmed malicious behavior.