web-content-downloader

SUSPICIOUS: The core purpose is coherent, but the skill's primary method sends user-requested URLs and content through Jina's third-party hosted reader, and the fallback references an MCP fetch path with unclear official provenance. Scope is otherwise proportionate, with moderate risk from indirect prompt injection and third-party data routing rather than clear malware behavior.