searchapi

Purpose and API endpoint usage are mostly coherent, and there is no clear exfiltration or hidden execution in the skill text. However, the skill’s core trust model depends on an unverified local CLI install path, and that CLI is configured with the user’s API key; this makes the skill suspicious/high-risk rather than benign.