pi-web-search

SUSPICIOUS: the skill’s web-research purpose is broadly coherent, but it expands risk through raw credential lookup from ~/.zshrc, multi-provider query routing, and explicit use of bash/read on untrusted fetched content. No clear malware indicators or deceptive exfil endpoint were shown, but the skill is medium risk and should be treated cautiously.