searching-history

SUSPICIOUS. The stated purpose is coherent, but the skill's actual implementation hinges on an unverified external `glhf` binary with no confirmed same-org provenance or official install documentation in the evidence. There is no direct proof of credential theft or exfiltration, yet the mandatory concern is high because an unverifiable CLI is entrusted with access to sensitive conversation history and tool logs.