jina-cli

SUSPICIOUS. The skill’s stated web-reading/search purpose is coherent with its capabilities and its data flows to official Jina endpoints look proportionate, but the installation trust is poor: it uses a raw GitHub curl|bash installer from a personal account, downloads an unverifiable binary without checksums, and that binary can receive API keys and session cookies. This mismatch between Jina-branded purpose and non-official personal distribution materially raises risk.