pm-improvement-skill-research

SUSPICIOUS: the skill’s main risk is not malware but durable instruction poisoning and over-broad autonomous change. It forces the agent to consume untrusted external content, rewrite trusted skill/agent/settings files, and commit the result, which is disproportionate and creates a strong indirect prompt-injection pathway.