gallery-dl

SUSPICIOUS. The skill’s purpose and capabilities mostly align with a media-downloader workflow, and its credential use is proportionate to authenticated site access. The main issue is install trust: the documented Linux standalone binary uses a same-author but non-current, unpinned GitHub release URL without verification, which is inconsistent with upstream documentation and raises supply-chain risk. No strong evidence of malicious exfiltration or unrelated credential harvesting was found.