tiangong-kb-course-search

Overall this skill is coherent with its stated purpose as a course-search wrapper, but it carries medium security risk from unpinned `npx ...@latest` execution, automatic dotenv loading, and configurable API endpoints that can redirect bearer tokens off the official service. Suspicious from an install/data-flow perspective, but not malicious based on the provided content.