autoresearch

SUSPICIOUS: the core purpose is coherent for a meta-skill, but its footprint is broad. The main risk is not malware-like behavior; it is that the skill combines web ingestion, file rewriting, and autonomous git/PR actions, creating indirect prompt-injection and repository-impact risk. External install trust looks mostly benign, but secret-bearing API calls via a local wrapper reduce data-flow clarity.