soia-pkm-clip-web

SUSPICIOUS: the stated purpose is coherent for web clipping to Obsidian, but the install path is higher risk than the task warrants because it chains to another skill/repo and requests wildcard agent permissions. Core runtime behavior appears locally scoped and not overtly malicious, but arbitrary web-content ingestion plus broad install trust makes this a medium/high security-risk skill.