realtime-cinema-data-engineering-pipeline

SUSPICIOUS. The skill’s functionality matches its stated data-engineering purpose, and data flows stay local to Kafka/PostgreSQL/Streamlit. The main risk is install trust: the skill published by ara.so directs users to clone and execute code from an unrelated personal GitHub repo, with unpinned Python dependencies and partly mutable Docker tags. No credential harvesting, covert exfiltration, proxy routing, or malware-like behavior is evident from the provided content.