deepresearch

SUSPICIOUS due to disproportionate tool scope for a research skill: it processes untrusted external content while retaining Bash and file-write access, creating indirect prompt-injection and command-execution risk. However, there is no evidence of credential harvesting, malicious exfiltration, third-party proxying, or suspicious installation behavior, so this is not malicious on the provided evidence.