web-search-linkup

SUSPICIOUS: The skill's web-search purpose matches its capabilities, but it directly reads a local credential file and sends the token, user prompts, and fetched-content requests through a Gooseworks proxy rather than a clearly documented direct upstream API. This looks like a coherent vendor-managed integration, not confirmed malware, but the credential handling and proxy-mediated data flow make it medium risk.