how-to-download-coomer-videos

SUSPICIOUS. The skill’s purpose and capabilities are broadly aligned, and there is no direct evidence of credential theft, shell execution, or covert exfiltration. However, it promotes installing a browser extension from unverifiable GitHub release artifacts with no checksum/signature details, and publisher consistency is weakened by the mismatched license link. This is a medium supply-chain trust issue rather than confirmed malware.