skills-search

SUSPICIOUS: the core search behavior is aligned and uses the official skills.sh ecosystem, but the skill materially increases risk by instructing transitive installation of other skills and by invoking npm CLIs with only partial provenance verification for the search package. No direct credential theft or exfiltration is evident, so this is a medium-risk trust-chain issue rather than confirmed malware.