research-deep

SUSPICIOUS. The core purpose is plausible, but the skill combines hidden background delegation, web-sourced research, file writes, and Bash execution in a way that is broader and less transparent than necessary. No clear credential theft or malicious exfiltration is shown, but concealment and delegated execution materially raise risk.