linkfox-ruiguan-gun-parts-search

SUSPICIOUS: The core compliance-check purpose is coherent with the API key, image upload, API call, and local result storage. The main concern is the fallback instruction to download and install another skill from a direct ZIP on a vendor domain without registry-based verification or checksums; combined with persistent local logging and external image upload, this makes the skill medium-high risk but not clearly malicious.