researcher

SUSPICIOUS: the skill's purpose and core capability align, but it expands trust to an external agy agent, requires unsandboxed token access, and defaults to an unrestricted permission profile. This looks more like a high-trust delegation wrapper than malware, with medium risk driven by broad downstream execution and credential-context exposure rather than clear exfiltration.