image-search

The skill's stated purpose—to search for and download images with Typst embedding code—aligns with its capabilities and data flows. It uses standard image APIs and stock photo sources, with optional direct URL downloads. The only notable concerns are standard credential handling (exposure risk if logs or history are not protected) and explicit reliance on external services for image retrieval, which is expected for this feature. No evidence of unauthorized data exfiltration or malicious behavior is present based on the provided description. Overall, the risk is low-to-moderate (benign with caution around credential handling and outbound requests).