universal-downloader

SUSPICIOUS. The skill's capabilities mostly match its stated downloader purpose, and the referenced tools are legitimate public projects from standard distribution channels. The main security concern is disproportionate weakening of transport security: it instructs the agent to disable TLS certificate validation by default across multiple tools, plus use browser cookies for authenticated scraping. That is risky but not inherently malicious, and there is no evidence of credential forwarding to unrelated endpoints or covert exfiltration.