knowledge-acquisition

SUSPICIOUS. The core research/wiki capabilities are coherent and mostly use official services, so this is not confirmed malware. Risk is elevated because the skill combines broad external-content ingestion, code/repo acquisition, command execution, and optional AWS deployment/sync actions; the AWS platform and DeepXiv extension enlarge scope beyond a simple local knowledge tool.