sec

SUSPICIOUS: the skill's stated SEC-search purpose is plausible, but the actual integration depends on an unofficial third-party MCP/proxy that receives authentication and mediates all sec.gov access. Install mechanics are standard and not malware-like, but the intermediary data flow and broader browser/scrape capabilities make this a medium-risk skill rather than a benign direct API integration.