gemini-search

SUSPICIOUS. The stated purpose is coherent, and Google Gemini CLI usage is consistent with official docs, but the skill’s preferred path depends on an unrelated third-party MCP bridge installed via unpinned npm/npx. That bridge can receive prompts and potentially Gemini credentials, making the skill’s trust footprint larger than necessary for literature search. The main issue is supply-chain and credential-forwarding risk, not confirmed malware.