last30days-cn

SUSPICIOUS: the core web-research behavior is coherent with the stated purpose, and the main installs are from legitimate ecosystems, so this is not confirmed malware. However, the skill expands trust to third-party APIs, a local Xiaohongshu bridge, optional browser automation with stored cookies, and an upstream skill install, making its credential/data-flow footprint broader than a simple research helper.