github-search

SUSPICIOUS: the search function is plausible, but the skill’s real footprint is broader because it is designed to funnel discovery into generation/installation of unreviewed third-party skills. No clear malicious payload or exfiltration is present, yet the transitive trust chain and token forwarding make the overall risk medium-to-high for an agent skill.