autoresearch

SUSPICIOUS due to autonomy, not malware: the skill is internally aligned with repo optimization, uses normal local developer tools, and shows no credential theft or off-platform routing. Risk comes from granting an agent Bash+Write+Edit+Git-style destructive behavior in an unbounded self-improvement loop without per-iteration approval.