autoresearch-agent

SUSPICIOUS. The skill’s behavior is mostly aligned with its stated purpose, and the main install path is same-publisher GitHub content rather than an unrelated binary. However, it enables indefinite autonomous edit/execute/reset loops and relies on unpinned install sources plus arbitrary local evaluation commands, creating meaningful operational and supply-chain risk even without clear evidence of credential theft or malicious exfiltration.