brightdata-local-search

SUSPICIOUS: The skill’s purpose is plausible and its data flows largely match that purpose, but the trust chain is inconsistent. A skill branded around Bright Data relies on a third-party personal GitHub project and forwards two API credentials into that code, creating moderate supply-chain and credential-forwarding risk even though there is no direct evidence of malware or overt exfiltration.