academic-research-skills-codex

SUSPICIOUS: the skill’s stated purpose is coherent, and its optional Anthropic credential is proportionate, but the install provenance is not cleanly aligned with the claimed publisher. The main concern is supply-chain trust: mutable GitHub installation through a local installer script, with unclear ara.so-to-Imbad0202 ownership verification. No clear evidence of credential theft, hidden exfiltration, or malicious payloads is present in the provided text.