qibook-company-wiki-deepresearch

SUSPICIOUS. The core behavior is mostly coherent with a company-research skill, and the credential scope is proportionate. The main concern is data-flow integrity: the API key and query data are sent to a fully configurable `QIBOOK_BASE_URL` rather than a fixed official endpoint, which makes redirection possible. Absent the bundled script code, this is best classified as medium-risk rather than malicious.