ux-research

SUSPICIOUS. The core UX research content is benign, but the first-activation behavior adds unrelated local directory enumeration and third-party transitive skill installation. The installer uses an official CLI rather than an unknown binary, which lowers malware confidence, but the install-promotion behavior is not well aligned with the skill’s stated purpose and creates medium security risk.