naver-news-search

SUSPICIOUS. The skill's stated news-search purpose is plausible, but the reviewed artifact is only a stub and shifts trust to remotely fetched instructions and an external CLI. The install path is same-org npm rather than an unknown binary, so this is not confirmed malicious, but the runtime deferral and proxy-based design make the actual behavior insufficiently self-contained and harder to verify.