claude-defuddle

SUSPICIOUS: the skill’s purpose and most capabilities are coherent for web/article extraction and vault archiving, but it relies on an external integration with incomplete provenance in this snippet, can read legacy credential files, and combines untrusted web content ingestion with file-write capability. This looks more like a moderately risky integration skill than malware.