m3u8-downloader

The skill's stated capabilities are largely consistent with its purpose as an HLS browser downloader, and the publisher/domain relationship appears coherent. The main issue is install trust: it depends on a proprietary, not clearly source-verifiable browser-extension build from GitHub Releases, so the extension's real permissions and network behavior cannot be independently confirmed. This is better classified as suspicious/high-risk due to unverifiable executable distribution, not confirmed malware.