autoresearch

SUSPICIOUS: the skill’s core purpose is coherent, but its footprint is medium risk because it combines unrestricted web ingestion with automatic local file writes, creating a strong indirect prompt-injection and content-poisoning path. No clear credential harvesting, third-party proxying, or confirmed malware behavior is present.