naver-shopping-search

SUSPICIOUS: the skill's shopping purpose is plausible, but the actual operative instructions are largely outsourced to a remotely fetched CLI/manual and involve a same-org proxy rather than fully local, transparent instructions. The publisher relationship appears coherent and same-org, so this is not confirmed malware, but the runtime indirection, mutable remote instructions, and transitive update surface make it medium risk.