agent-reach

SUSPICIOUS: the skill's broad 'must use for all internet research' scope is mostly consistent with its router purpose, but it centralizes web access, relies on multiple third-party CLIs/backends, asks the agent to handle user cookies, and processes large volumes of untrusted external content. No clear malicious exfiltration is shown, but the install trust and credential-routing model are riskier than a narrowly scoped research skill.