hankookilbo-news

SUSPICIOUS: the stated news-lookup purpose is coherent with calling an official Hankook Ilbo MCP endpoint, and the no-auth model is proportionate for public news data. The main issue is install/execution trust: the skill is only a stub and requires running an external npm CLI from another publisher to obtain the real instructions, creating a mutable transitive trust chain and unnecessary supply-chain exposure for a simple news skill.