web-search

SUSPICIOUS: the stated purpose is coherent, but the skill routes user queries and extracted web content through a third-party gateway CLI, grants broad `infsh` shell access, and promotes transitive skill installation. This looks more like a platform gateway than a narrowly scoped Tavily/Exa search skill, creating medium-high supply-chain and data-flow risk without clear evidence of outright malware.