harvard-art-museums-data-engineering-app

SUSPICIOUS: the skill’s capabilities and data flows fit its stated ETL/analytics purpose, and credentials go only to the official Harvard API and the user’s own database. The main concern is install trust: the skill publisher differs from the referenced GitHub repo owner, and setup depends on an unpinned third-party repository without checksum or release verification.