brave-search

SUSPICIOUS. The skill's stated purpose is Brave Search, but it routes all usage through DeepNLP's OneKey Gateway, requires a gateway credential instead of Brave credentials, and forwards user queries to a third-party intermediary. Package installation is from standard registries, so this is not confirmed malware, but the purpose/data-flow mismatch and credential forwarding make the skill medium-high risk.