autoresearch-agent

SUSPICIOUS: the skill's core behavior is coherent with its stated purpose, but it grants an agent a high-autonomy edit/execute/git loop that can run indefinitely and use arbitrary evaluation commands. Install provenance is mostly consistent for the GitHub repo, with moderate extra risk from the unverified registry-based install path; no clear credential harvesting or malicious exfiltration is shown.