research-brief

SUSPICIOUS: the skill is mostly aligned with its research-and-publish purpose and uses apparently official services, but it creates autonomous recurring write actions and processes untrusted web content with downstream publication capability. The main risks are indirect prompt injection and moderate trust/credential exposure to external MCP and automation services, not confirmed malicious behavior.