agent-reach

SUSPICIOUS. The skill’s broad web-reading purpose matches its capabilities, but its install and trust model are weak: it installs from an unpinned GitHub branch archive, then expands into multiple external tools and credentialed integrations. Cookie extraction, proxy configuration, and third-party Exa MCP routing are proportionate to the stated purpose but increase exposure. This looks more like a risky, over-broad internet aggregation tool than clear malware.