harvard-artifacts-data-engineering-pipeline

SUSPICIOUS. The ETL/API/SQL/dashboard capabilities are proportionate to the stated purpose, and data flows go to the official Harvard API and a user-supplied database. The main issue is install trust: the skill claims ara.so authorship but directs users to a different personal GitHub repo with mismatched instructions, making the distribution path inconsistent and weakly verifiable rather than clearly malicious.