download-anything

SUSPICIOUS: the footprint mostly matches the stated download purpose, but the skill is high-exposure by design. Official package-manager installs keep malware evidence low, yet broad untrusted-content retrieval, torrent workflows, mirror chasing, and implied browser-cookie access create a meaningful security risk for an AI agent.