kr-whois-lookup

SUSPICIOUS: the stated WHOIS lookup purpose is plausible, and the install path appears same-org and registry-based, but the skill is mostly a loader that defers its real behavior to remote instructions at runtime. That makes the actual capabilities, endpoints, and data flows only partially reviewable from this artifact, so risk is medium rather than benign.