myrealtrip-search

SUSPICIOUS: the visible skill is mostly a stub that delegates real behavior to a remotely fetched npm CLI and GitHub-hosted instructions. That indirection is disproportionate for a simple search skill and prevents full review of capabilities and data flows from the provided content alone, though there is no direct evidence here of credential theft or overtly malicious behavior.