web-search

SUSPICIOUS. The skill's main behavior is coherent with a web-search/browser-fetch purpose, and it does not request credentials or route data through an unrelated gateway. The primary risk is indirect prompt injection from arbitrary web content combined with command execution capability; install trust is moderate because `bun install` is standard but the actual dependencies were not provided for review.