pp-shodhganga

SUSPICIOUS. The core Shodhganga-search purpose is mostly coherent, but the skill’s footprint is broader than necessary: it installs unpinned external binaries, maintains a persistent learning/journaling layer, and exposes arbitrary webhook delivery paths. There is no clear evidence of outright malware or credential theft, but the outbound routing and always-write behavior make it higher risk than a simple read-only metadata skill.