research

SUSPICIOUS. The core purpose is coherent for a research skill, but it has meaningful risk from transitive skill delegation, unspecified trust in a local Gemini CLI, and prompt-injection exposure from untrusted external content combined with shell/file-write capabilities. No clear evidence of credential theft or overtly malicious behavior.