literature-review-tools

SUSPICIOUS: the skill's purpose matches its behavior, but it is a high-trust meta-launcher that installs and runs numerous third-party research tools, forwards API keys into external code, and can register MCP integrations. This looks more like a broad orchestration surface than a narrow guide, so the main concern is supply-chain and credential exposure rather than confirmed malware.

No direct evidence of built-in malware/obfuscation in this snippet, but it is a high-privilege orchestrator that (1) reads untrusted recipe/workflow JSON to determine what to install and execute, (2) installs arbitrary dependencies via pip/uv, (3) clones and installs from external repos for web UIs, (4) executes recipe-defined entry points/scripts, and (5) can execute arbitrary Python code from a recipe's 'example' field when it starts with 'python -c'. It also writes and passes API keys to child processes and may persist them to .env files. Overall, the dominant risk is supply-chain/recipe tampering leading to arbitrary code execution and credential exposure.