search-layer

SUSPICIOUS: The skill’s main function is legitimate search aggregation, but its actual footprint is broader than a normal search helper. The biggest concerns are credential forwarding through local scripts, configurable third-party endpoint routing for Grok, and recursive processing of untrusted web/GitHub content. No clear malware or covert exfiltration is shown, but the data-flow and trust model are only partially aligned with the stated purpose.