naver-news-search

SUSPICIOUS. The skill's news-search purpose broadly matches its capabilities, and the install path appears same-publisher via npm/GitHub rather than an obviously malicious third party. However, the skill is only a thin stub that requires runtime-fetched instructions and uses a publisher-operated proxy instead of Naver's official endpoint, so users must trust both mutable remote instructions and intermediary infrastructure. This is not confirmed malware, but it has meaningful reviewability, supply-chain, and data-flow trust concerns.