nemo-rl-auto-research

SUSPICIOUS rather than malicious: the skill’s capabilities mostly match its stated purpose, but it grants broad autonomous shell/git/compute authority and depends on companion skills, which raises meaningful operational risk. No direct credential theft, exfiltration endpoint, hidden execution, or clearly malicious mismatch is present.