search-api

SUSPICIOUS. The skill is not overt malware and uses a real official Membrane CLI, but it is internally inconsistent and routes search/API activity through a third-party proxy rather than Google's direct API flow. The unpinned `npx @latest` execution, local credential reuse, and arbitrary full-URL proxying make the footprint broader than a narrowly scoped Search API skill.