google-news

SUSPICIOUS. The skill is coherent as a paid third-party news API wrapper, but it routes data and credentials through fetcher.sh instead of official Google endpoints and adds agent-usable payment actions, including credits top-up and x402 crypto payment flow. No direct malware or remote installer behavior is present, but the intermediary data flow and autonomous spending capability raise medium security concerns.