autoresearch

SUSPICIOUS: the skill's core behavior matches autonomous optimization, but it grants an AI agent high-impact autonomy over code changes and command execution, plus transitive trust in other skills. There is no clear credential theft or exfiltration path, so this is not malicious; the main risk is autonomous execution and repo modification at scale.