video-research

SUSPICIOUS. The skill’s purpose is coherent, and the yt-dlp usage is broadly consistent with video research, but the overall footprint is elevated by broad Bash plus Write access over untrusted web content and especially by the unverified wildcard claude-in-chrome MCP dependency. Main concern is trust and prompt-injection exposure rather than confirmed malware or explicit credential theft.