jupyter-live-kernel

SUSPICIOUS. The skill’s capabilities fit its Jupyter REPL purpose, but trust is weakened by cloning a third-party live GitHub repo under a different stated author and by explicitly disabling Jupyter authentication. Data flow stays local and there is no clear exfiltration behavior, so this is not confirmed malware, but it carries meaningful supply-chain and local exposure risk.