autoresearch

SUSPICIOUS: The skill is purpose-aligned for autonomous ML experimentation and shows no credential harvesting or explicit exfiltration, but it grants an AI agent sustained unattended authority to modify code, execute training runs, and rewrite git history. Supply-chain risk is limited and mostly tied to uv/project dependency execution rather than deceptive distribution.