customer-research

SUSPICIOUS: the core customer-research guidance is benign and documentation-like, but the companion-check adds unnecessary local enumeration and a transitive third-party skill installation step. There is no clear credential theft or exfiltration, yet the install behavior is disproportionate to the skill’s stated purpose and raises medium security risk.