patent-search-collect

SUSPICIOUS. The skill’s functional scope matches patent collection, but trust is weakened because it depends on a third-party MCP server that appears to be personal, not vendor-operated, and that server receives the KIPRIS API key. There is no clear evidence of malware or exfiltration, but the install/data-flow trust model is not strong enough to classify as fully benign.