pubmed-search

SUSPICIOUS. The core function is plausible, but the skill adds a third-party paid gateway, instructs direct download-and-execution of an unverifiable helper, and asks for a plaintext wallet private key for a simple literature search. That combination is disproportionate to the task and creates a strong credential-forwarding and supply-chain risk, even without clear proof of malicious intent.