ulw-research

SUSPICIOUS: the skill’s purpose is coherent, but its operational footprint is broad. It combines recursive web/repo ingestion, subagent swarms, file writes, and code execution, creating high prompt-injection and moderate transitive-trust risk. Tool provenance appears mostly legitimate, so this is not confirmed malware, but it is a high-risk research automation skill.