research-account

SUSPICIOUS. The core research workflow is mostly coherent and uses an official-looking npm-distributed Cargo CLI, but the skill goes beyond briefing by adding publisher attribution telemetry, an optional transitive skill installation, and an unrelated GitHub starring action. Data flows appear mostly proportional to the stated purpose, yet the extra actions make the footprint broader than a narrow research skill should be.