harvard-art-museums-data-pipeline

SUSPICIOUS: The data flows and credential use are broadly consistent with a museum-data ETL skill, and API calls go directly to Harvard’s official endpoint. The main concern is install trust: the skill published by ara.so/aradotso directs users to clone a separate personal GitHub repository, creating a third-party supply-chain hop without clear same-org verification. No credential exfiltration, proxy routing, hidden execution, or malicious payload behavior is evident.