huggingface

SUSPICIOUS. The skill is coherent in purpose, but it routes all Hugging Face access through third-party Unbrowse infrastructure using Unbrowse credentials and optional cloud-browser/autofill flows. That proxy architecture is the main risk: not obvious malware, but a meaningful data-flow and credential-forwarding concern compared with using Hugging Face's official first-party API directly.