research-cli

SUSPICIOUS. The stated purpose and behavior generally align, and there is no direct credential harvesting or exfiltration in the instructions. However, the skill depends on unverifiable external CLIs with unclear provenance and undisclosed backend routing, which creates a mandatory high install-trust risk even though the content-fetching behavior itself is proportionate to a research skill.