content-harvest

SUSPICIOUS. The skill is broadly aligned with article extraction and does not request disproportionate credentials or route data to unrelated endpoints, so it is not malicious. However, its install guidance is only partly trustworthy: trafilatura is legitimate, but the 'Mozilla reader' CLI provenance is unclear and appears to rely on third-party wrappers, with unpinned global installs increasing supply-chain risk.