video-downloader

SUSPICIOUS: the catalog entry is lightweight and not directly malicious, but it instructs installation of an upstream skill bundle, creating a transitive trust/supply-chain risk without pinning or self-contained review. No direct credential theft or exfiltration is visible in this artifact alone.