smart-search

SUSPICIOUS: the skill’s purpose is coherent, but it relies on a third-party browser automation CLI with non-upstream provenance and processes untrusted web content with action-capable tooling. No clear credential harvesting or exfiltration is present, but supply-chain and prompt-injection exposure make it medium/high risk.