search1api

SUSPICIOUS rather than benign: the skill’s behavior broadly matches its web-research purpose, and data flows align with Search1API usage, but trust is reduced because the `search1api-cli` package provenance was not verified from first-party evidence while it receives the user’s API key. Main risks are third-party CLI trust and prompt-injection exposure from untrusted web content, not confirmed malware or clear credential theft.