research-literature

SUSPICIOUS: the visible skill is not overtly malicious, but it is under-specified and grants broad shell execution for a healthcare literature task while hiding core behavior in an unseen local script. Risk is driven by opaque implementation and disproportionate execution capability, not confirmed credential theft or exfiltration.