netryx-street-level-geolocation

SUSPICIOUS: the skill’s stated purpose is coherent, but install trust is not. Its core functionality requires cloning and running code from a personal GitHub repo that does not clearly match the skill publisher, with additional GitHub-based dependency installation and no strong release-verification trail. Data flows are mostly proportionate to geolocation, so this looks more like a supply-chain trust problem than confirmed malicious behavior.