autoresearch

SUSPICIOUS: the skill’s capabilities broadly match its stated purpose, but it grants an AI agent a high-autonomy loop that repeatedly executes arbitrary shell commands, edits code, and performs destructive git operations without per-step confirmation. No credential harvesting, external exfiltration, or malicious installer is present, so this is not malware; the main risk is unsafe autonomous execution in a developer environment.