x-article-download

SUSPICIOUS. The core download/archive purpose is plausible, but the skill reaches beyond that purpose by extracting browser-based X auth into `xreach`, routing Article handling through `r.jina.ai`, using unofficial bearer-token workarounds, and cloning arbitrary GitHub repos from tweet content. These behaviors are internally inconsistent enough to warrant caution, though they do not prove confirmed malware.