competitor-teardown

SUSPICIOUS. The core competitor-research behavior is mostly coherent and proportionate, but the skill materially increases risk by combining untrusted web content ingestion with local execution and by instructing installation/loading of another skill. The third-party ScrapingDog MCP dependency appears same-vendor and registry-distributed rather than overtly malicious, so this is not confirmed malware; the main concerns are prompt-injection exposure, transitive skill trust, and external credential forwarding to MCP tooling.