autoresearch

SUSPICIOUS: the skill’s core purpose is coherent, but it grants an agent a broad autonomous self-modification loop over other skills and can ingest untrusted skill content while continuing to edit files. There is no clear credential theft or exfiltration path, so this is not confirmed malware, but it is a high-risk autonomous optimization skill with moderate prompt-injection exposure and minor CDN supply-chain risk.