drugbank-database

SUSPICIOUS. The skill’s purpose and capabilities are coherent for DrugBank research, and data targets the official DrugBank service. The main concern is install and credential trust: it relies on a third-party `drugbank-downloader` package, not DrugBank-owned tooling, and may pass DrugBank credentials into that external code. This is a moderate supply-chain and credential-forwarding risk, but not confirmed malicious behavior.