anysearch-mcp-server

SUSPICIOUS. The core purpose and direct data flow to AnySearch are coherent and the official HTTP endpoint appears legitimate, but the alternate proxy setups materially expand trust: unpinned third-party npm CLIs are installed/executed and are given the AnySearch API key. No confirmed malware or deceptive exfiltration is evident, but the credential-forwarding through unrelated proxy tools makes this a medium-high risk skill.