udemy

SUSPICIOUS. The scanner finding itself is benign documentation, but the skill’s real footprint routes Udemy content access, OAuth/API tokens, and possibly login-backed browsing through an unofficial third-party service (Unbrowse) rather than official Udemy APIs. Same-org hosting for Unbrowse reduces pure supply-chain concern, but the intermediary data flow and broader server-side browse capabilities are not fully proportional to a simple read-only Udemy page skill.