web-search

SUSPICIOUS. The skill’s purpose is coherent, but its actual footprint is broader than a simple search integration: it requires transitive skill installation, a third-party authenticated CLI, and routes search/extracted content through inference.sh rather than directly to Tavily/Exa. Same-org provenance and documented installers reduce malware confidence, but supply-chain, intermediary data flow, and prompt-injection risks make this a medium-risk skill.