deep-insight

SUSPICIOUS: the core purpose is benign and the local file write is proportionate, but the skill expands scope by encouraging use of an unverified external `deep-research` skill and web retrieval on untrusted content. Main risk is transitive trust plus indirect prompt injection, not credential theft or overt malware.