autoresearch

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose, and there is no evidence of credential theft, third-party routing, or untrusted installation. The main risk is high autonomous action: it authorizes indefinite local code changes and git history manipulation without per-iteration user approval, making it operationally dangerous despite coherent purpose.