research-ideation

SUSPICIOUS. The skill’s stated purpose is coherent with literature review and research planning, and there is no direct evidence of credential theft or overtly malicious behavior. However, it depends on untrusted external content, references a third-party Zotero MCP layer instead of official Zotero tooling, and introduces transitive trust via another skill. Risk is moderate due to provenance and prompt-injection exposure, not confirmed malware.