deep-research

SUSPICIOUS. The core research-orchestration purpose is plausible, but the footprint is broader than necessary due to Bash/Write/WebSearch/Task autonomy, suppressed task output, and execution of an unverifiable local validator script. No clear credential theft or malicious exfiltration is shown, so this is not confirmed malware, but execution trust and visibility are weak enough to classify it as medium-high risk.