video-download

SUSPICIOUS. Most capabilities fit a social-video downloader, and dependency installs are standard package-manager based, but two issues materially raise risk: the skill explicitly disables TLS verification and it routes WeChat resolution through an external self-hosted resolver with an API key over plaintext HTTP. Cookie access is relatively scoped and purposeful, so this is not confirmed malware, but the transport-security and third-party data-flow choices make the skill high risk.

The fragment appears intended as a video downloader rather than malware. It has meaningful security weaknesses: global TLS verification bypass, unrestricted output paths, and insufficient restrictions on resolver-provided download URLs. It also contains syntax errors that prevent execution as supplied.