real-estate-search

SUSPICIOUS. The visible stub is not overtly malicious, and the npm/GitHub sources appear consistent with the publisher, but the skill's real behavior is deferred to remote runtime-fetched instructions. That makes the effective scope unverifiable at review time and creates a meaningful trust-chain risk even though no direct credential theft or exfiltration is shown here.