google-scholar

SUSPICIOUS. The skill's search/citation behavior matches its stated purpose, but it depends on an unverifiable local `scholar` CLI and forwards browser-derived Google cookies to that binary. That external credential-handling path is disproportionate unless the CLI's publisher, source, and release provenance are independently verified.