research

SUSPICIOUS: the core research purpose is coherent with web search and report writing, but the skill expands trust by executing an external CLI when available and by delegating repository reading to another skill with unclear provenance. No direct credential theft or overt exfiltration is evident, yet the transitive-skill dependency and untrusted-content handling make the overall risk medium rather than benign.