news-sentiment-engine

SUSPICIOUS: The stated news-briefing purpose is plausible and the requested Anthropic credential is proportionate, but the optional setup materially expands trust to an unpinned community GitHub project and then hands that code an API key. No explicit malicious or exfiltration behavior is shown in the skill text, so this is better classified as supply-chain and credential-forwarding risk than confirmed malware.