alterlab-bgpt-search

SUSPICIOUS: The skill's purpose is coherent, but its setup is internally inconsistent and introduces avoidable trust risk by routing access through third-party npm CLIs, especially the experimental mcp-remote wrapper that may forward API credentials. The core endpoint appears aligned with the stated service, so this is not confirmed malware, but the install and credential-routing choices make it medium risk.