claude-cowork

SUSPICIOUS: The skill’s stated purpose matches its capabilities, and its primary install path is first-party Anthropic infrastructure, so this is not clearly malicious. However, it enables autonomous real-world actions, scheduled execution, and plugin/sub-agent installation, which create meaningful security risk and transitive trust concerns, especially when combined with research over untrusted external content.