research

SUSPICIOUS: the skill’s research purpose matches its general behavior, but its footprint is broad and it funnels untrusted external content through many third-party backends and some unverified local helper scripts. Main concerns are supply-chain trust gaps and indirect prompt-injection exposure, not confirmed malware.