webtoon-vault-manga-downloader

SUSPICIOUS. The skill’s capabilities generally match its stated downloader purpose, and there is no clear credential theft or unrelated access. However, the install path is not well-verified: it relies on a GitHub Pages download and an inconsistent repo/package story without a clear signed release or confirmed package registry provenance. Risk is driven by supply-chain trust, not overt malicious behavior.