insane-research-main

SUSPICIOUS. The core research purpose is plausible, but the footprint is broader than necessary: hidden shell setup, bypassPermissions agent use, and heavy processing of untrusted web content with local execution/write capability. Most flagged backticks are benign references, yet the silent setup step and autonomy/concealment directives make this higher-risk than a normal documentation-style research skill.

No clear malware or data exfiltration behavior is present. The main security concern is filesystem path traversal: session_id can direct reads outside the session root, while artifact/output names and subfolders can direct writes outside their intended directories. Validate paths and enforce resolved-path containment.