search-in-scene

SUSPICIOUS. The core capability matches the stated purpose of scene queries, and there is no direct malware pattern or command injection execution. However, the skill reads local shell config files and forwards Basic/Bearer credentials to a remote API host whose domain is entirely opaque via USD_SEARCH_API_URL, so install/runtime trust and data-flow integrity cannot be verified from the skill alone. This is more a trust-boundary and credential-routing concern than confirmed malicious behavior.