ultra-research

SUSPICIOUS. The core research behavior is purpose-aligned and the named external services appear mostly official, so this is not confirmed malware. Risk is still medium because the skill recursively consumes untrusted web content while retaining write/exec capabilities, auto-persists data into memory, and depends on unverifiable local shell helpers not documented by the tool publishers.