tiangong-kb-sci-search

SUSPICIOUS: the skill’s purpose is coherent, but its trust model is weaker than expected because it runtime-installs a mutable external CLI, forwards API credentials to that CLI, and allows endpoint override via `api_base_url`. This looks more like a risky wrapper around an external tool than overt malware.