fetch-url

SUSPICIOUS. The core behavior matches a URL-fetching skill, and install sources are largely official. However, the skill routes content through unofficial third-party intermediaries (Jina Reader and FxTwitter), and optionally forwards a bearer token to Jina, creating medium data-flow risk that exceeds a purely direct-fetch design.