pypi

SUSPICIOUS: the skill's purpose is coherent, but it routes PyPI interactions and auth through Unbrowse's third-party infrastructure rather than official PyPI APIs. This is not malware and shows no hidden execution or credential theft, yet the intermediary data flow and credential forwarding make it higher-risk than a direct official PyPI integration.