web-research

SUSPICIOUS. The stated purpose matches the capabilities, but the skill has a notable indirect prompt-injection footprint: it fetches arbitrary web content, writes it locally, and has Bash access for further actions. The browser39 dependency appears same-author and source-visible rather than clearly malicious, so the main concern is unsafe execution scope around untrusted content, not confirmed malware.