soia-pkm-clip-web

SUSPICIOUS: the core clipping behavior is coherent, but the skill expands trust by installing third-party marketplace/registry content, requesting wildcard permissions, delegating to other skills, and processing arbitrary web content with file-write capability. This looks more like an over-broad, higher-risk automation skill than clear malware.