vault-search

SUSPICIOUS: the skill’s purpose is coherent, and it does not ask for credentials or route data to known third-party endpoints, but it relies on an ambiguous external `vault-cli` executable with no install provenance or publisher verification. Main risk is unverifiable execution trust rather than confirmed malicious behavior.