dzen

SUSPICIOUS: the core purpose is coherent, but the skill relies on manually extracted browser-session cookies and CSRF tokens stored in a local config file, which is a disproportionate and fragile auth pattern for an AI skill. Data appears to flow directly to dzen.ru rather than an obvious third-party collector, so this is not confirmed malware, but it carries meaningful credential-handling and account-action risk.