physical

SUSPICIOUS: the skill's purpose matches its capabilities, but it handles extremely sensitive real-time location data for a named individual and relies on an unreviewed local script plus an unverified GitHub data repo. The main issue is privacy sensitivity and unverifiable data provenance, not confirmed malware.