hoekee-com-sg

SUSPICIOUS. The skill is not overtly malicious and uses an apparently legitimate same-org Unbrowse service, but its real footprint is broader than a simple hoekee.com.sg reader: it asks users to trust a third-party MCP/API, forwards credentials to that intermediary, and exposes generic remote browsing capabilities. The main risk is mediated data flow and transitive MCP trust, not command injection or malware.