market-research-reports

SUSPICIOUS: the core workflow is mostly coherent for a market-report skill, but the supplied skill text materially differs from the current upstream K-Dense version and relies on companion skills that send prompts and API-backed research requests to Parallel/OpenRouter. No direct malware or overt exfiltration is shown, yet the transitive trust chain, undocumented inline credential/network needs, and third-party data flows raise medium risk.