puresnap

SUSPICIOUS. The skill’s stated purpose matches media downloading, but its actual footprint is problematic: it embeds and conceals a hardcoded API key, sends user URLs to a third-party extraction service, and instructs the agent to fetch further files from API-returned URLs. The core capability is coherent, yet the hidden built-in secret and third-party routing make the skill high-risk and not proportionate to a normal downloader integration.