download-anything

SUSPICIOUS. The core capabilities match the stated purpose, but the skill materially increases risk by steering users toward piracy/mirror ecosystems, invoking an unreviewed local installer script, using browser-cookie based authentication with third-party download tools, and optionally routing requests through a cobalt intermediary. Not confirmed malware, but broader and riskier than a simple downloader guide.