youtube-research

SUSPICIOUS: the skill’s overall behavior is mostly aligned with its stated YouTube research purpose, but it routes core collection through an opaque PostPlus cloud intermediary with undocumented collection keys and hidden host-managed secrets. No strong malware indicators or deceptive credential harvesting are visible, yet the cloud data flow and downloader-backed collection expand trust and privacy risk beyond a simple local research skill.