researchclaw

SUSPICIOUS. The skill's overall purpose is coherent, but it meaningfully expands risk by encouraging `--auto-approve`, enabling generated code execution, and allowing optional SSH remote runs. No clear credential theft pattern is shown, yet install provenance for the `researchclaw` CLI is ambiguous and the autonomous execution scope is high for a research assistant skill.