autoresearch

SUSPICIOUS: the skill’s purpose largely matches its capabilities, but it grants an agent an autonomous self-modification loop over arbitrary skills, with repeated execution, file writes, git history changes, and optional delegation to another skill. There is no clear credential theft or exfiltration, but the autonomy and transitive-skill behavior make it a medium/high operational risk.