k2f-travel-planner

SUSPICIOUS: The visible skill content is benign and aligned with travel-planner authoring, with no credential harvesting or exfiltration. Risk comes from the unnecessary transitive installation of another skill and mildly unclear K2F provenance, so this should be treated as medium trust/supply-chain risk rather than malware.