medical-research-toolkit

SUSPICIOUS: the skill’s research purpose is plausible and the local package install appears legitimate, but the primary production design routes user queries through a third-party Curiloo MCP gateway instead of official biomedical APIs. That proxy architecture is broader than necessary and weakens data-flow transparency, especially if optional API keys are later used through the same path.