toutiao-search

SUSPICIOUS: the core Toutiao search behavior is broadly coherent, but the skill’s footprint expands into autonomous payment handling and runtime installation/execution of an unpinned third-party CLI. That makes the skill materially riskier than a normal search/reporting integration, though the observed flows still appear aligned with its stated recharge-and-retry design rather than confirmed malware.