cumcm-master

SUSPICIOUS: the core capabilities mostly fit a math-modeling skill, but the footprint is broader than necessary because it combines autonomous web research, code execution, extensive local writes, and live exposure of detailed reasoning. The main concerns are medium supply-chain trust for bootstrap scripts, prompt-injection risk from web content, and unnecessary thought-process disclosure to localhost rather than confirmed malware.