grok-search

SUSPICIOUS. The skill's search behavior mostly matches its purpose, but it relies on an unofficial third-party CLI installed via unpinned `curl|bash` from a personal repo and reuses local Grok credentials through that binary. This is a high supply-chain and credential-forwarding risk even without clear evidence of outright malicious behavior.