google-search

SUSPICIOUS: the skill’s stated purpose is Google Search, but it routes queries and credentials through a third-party gateway and external tooling rather than directly to Google’s official API. Package installs are from standard registries, so this is not confirmed malware, but the intermediary data flow, credential forwarding, and demo-key pattern make the footprint broader than necessary for the claimed purpose.