brave-search

SUSPICIOUS. The stated purpose is benign and the visible command is proportionate, but the skill relies on an ambiguously named external CLI whose provenance does not match Brave's official documented tool. Because the binary is not verifiably identified by the skill and no install path is provided, this triggers high supply-chain risk even without evidence of overtly malicious behavior.