youtube-feed

SUSPICIOUS: the stated purpose is plausible and mostly proportionate, but the real behavior cannot be fully verified because the core script is missing, the skill is installed from a mutable third-party GitHub source, and it chains into another unreviewed skill. No confirmed credential theft or overtly malicious behavior is visible in the supplied text alone.