search-layer

SUSPICIOUS. The stated purpose matches a search aggregation skill, and the named external APIs are official and coherent with that purpose. However, the skill is unusually broad, routes all search through repo-local scripts that receive credentials, and combines untrusted web/GitHub content ingestion with recursive follow-up fetching, creating a high indirect prompt-injection and moderate credential-forwarding risk. No clear evidence of malware or intentional credential theft is present from the skill text alone.