deep-research-academic

SUSPICIOUS: the skill’s core purpose is legitimate and its install path appears same-org/official, but it grants a research agent high autonomy over untrusted web content while preserving file-write, script-execution, and subagent capabilities. The main risk is prompt-injection and transitive-action exposure rather than malware or credential theft.