sydney-commute

SUSPICIOUS. The transport-planning behavior mostly matches the stated purpose, and the credential/file access is limited to an optional TfNSW key. However, the skill introduces medium risk through transitive remote installation via the Skills CLI and a third-party IP geolocation fallback; these are not outright malicious, but they expand trust and data flow beyond what a simple commute helper strictly needs.