tiangong-kb-esg-search

SUSPICIOUS. The skill’s purpose and core capability are mostly aligned, and the credential scope is proportionate for ESG search. However, it fetches and runs a third-party CLI at runtime, auto-loads local dotenv files near request payloads, and permits CLI override, which expands the trust boundary. Because the exact official documentation for the @tiangong-ai/cli ESG command path was not independently verified, this is best classified as medium risk rather than benign.