youtube-clipper

SUSPICIOUS. The advertised purpose is plausible, but this skill is primarily a pointer that asks the agent/user to install an external third-party skill from GitHub. That transitive trust and unverified supply-chain step are disproportionate to a simple catalogue entry, even though no direct credential theft or malicious payload is shown here.