korean-heritage-search

SUSPICIOUS. The stated purpose is benign and the documented data flow to official Korea Heritage Service endpoints appears proportionate, but the skill is mainly a thin loader that defers behavior to publisher-controlled remote instructions via an npm CLI and mutable GitHub content. This is not confirmed malware, yet the transitive trust and runtime instruction indirection make it higher risk than a self-contained search skill.