mathworks

SUSPICIOUS. The skill's stated purpose matches its capabilities, and the scanner's command-injection hit is a false positive from documentation text. However, the real footprint routes all browsing and any API key/OAuth session through an unofficial third-party service (Unbrowse) instead of direct MathWorks endpoints, making this a medium-risk brokered integration rather than a benign first-party documentation skill.