searchcli-volcengine-ai-search

SUSPICIOUS. The skill's capabilities and requested credentials are broadly consistent with a search CLI, but the install model relies on git clone + script execution and transitive skill installation, which materially increases trust and supply-chain risk. No clear credential exfiltration, covert behavior, or incompatible capability was shown, so this is not confirmed malware.