search-console-insights

SUSPICIOUS. The core Google/Bing read-only reporting flow is coherent and mostly benign, but the skill expands scope by storing raw local credentials and optionally routing keyword/domain data through third-party SERP providers unrelated to Google. No confirmed malware or deceptive installer behavior is present, yet the credential handling plus third-party data routing make the overall skill medium risk.