airport-traffic

SUSPICIOUS. The stated purpose is coherent with the commands used, but the skill depends on a third-party MCP/plugin and a remote shell-based `aero` program rather than direct official API calls. That adds transitive trust and supply-chain risk, though there is no clear credential harvesting, disproportionate secret access, or obvious exfiltration in the skill text itself.