user-research-cookiy

SUSPICIOUS: the stub is internally coherent for a vendor user-research skill, but its main function is to redirect installation to another skill and optional CLI, creating transitive trust and moderate supply-chain risk. No clear credential theft, hidden exfiltration, or malicious pre-execution behavior is present; concern is primarily the unpinned third-party install chain and deferred execution footprint.