naver-blog-research

SUSPICIOUS. The stated purpose is benign, but the skill is mostly a loader that delegates behavior to remote CLI/GitHub instructions. Because the external package appears same-org and officially documented, this is not strong evidence of malware; however, the transitive trust and mutable remote-instruction design make the skill higher risk than a self-contained research skill.