architecture-research

SUSPICIOUS: the core purpose is benign and largely aligned, with no direct credential theft or exfiltration. Risk comes from transitive reliance on unspecified other skills and from combining web research over untrusted content with write and bash capabilities, which makes indirect prompt-injection and trust-chain abuse plausible.