effective-web-research

SUSPICIOUS: the main skill is a benign-looking research workflow, but it instructs the agent to install/load a third-party `web-access` skill and escalate into browser/CDP login-state retrieval. That transitive trust chain and untrusted-content processing are not malicious by themselves, but they make the skill materially riskier than a pure research guide.