narova-stock-extensions

SUSPICIOUS: The stated purpose is coherent for stock/media discovery, and the skill avoids obvious malicious patterns like remote installers or proxy credential routing. However, it depends on an unverifiable `narova` CLI that likely receives optional provider credentials and handles downloaded bytes, so the trust boundary is too opaque to classify as benign.