daangn-used-goods-search

SUSPICIOUS. The skill's stated purpose aligns with Daangn search/workflow automation, and its data flows go to official Daangn endpoints rather than an unrelated proxy. The main issue is trust: SKILL.md is a thin stub that executes a remote npm CLI to obtain the real instructions, and the update path can refresh multiple skills. This is not confirmed malware, but the indirection and transitive trust make it a medium-risk skill rather than benign.