tiangong-kb-report-search

SUSPICIOUS: the skill’s search behavior matches its stated purpose, but it relies on runtime installation of a mutable npm CLI, forwards credentials into that CLI, and permits API endpoint override that could redirect secrets off the official service path. Risk appears driven by supply-chain and credential-routing design rather than clear malicious intent.