research-paper-writing

SUSPICIOUS. The core capabilities mostly fit a research-paper workflow, and most network/data flows target legitimate academic or tooling endpoints. Risk rises because the skill goes beyond writing into autonomous experiment management, git push behavior, quiet cron operation, MCP/skill installation, and broad delegated access; these are disproportionate enough to warrant suspicion, but not evidence of confirmed malware.