news-shopping

SUSPICIOUS: The skill's purpose matches its search capability, but its trust model is weaker than expected. It uses an unpinned external CLI and routes requests through a non-official intermediary domain, creating moderate supply-chain and data-flow risk without clear evidence of outright malware.