deep-research

SUSPICIOUS: the core research/archive purpose is coherent, but the skill expands trust and attack surface through transitive skill execution, broad untrusted-content ingestion, and local memory/archive access. The biggest concerns are indirect prompt injection and multi-hop dependency trust, especially the personal-repo `last30days` path and browser stack indirection; there is no direct evidence of malware or overt credential theft in this SKILL itself.