topic-research

SUSPICIOUS: the skill's purpose is ordinary topic research, but it relies on a stealth extraction workflow and a third-party browsing CLI/service that can receive credentials, browsing content, and logs. The install path appears same-project rather than clearly malicious, so this is not confirmed malware, but the extra trust surface and untrusted-content processing make the skill medium risk.