research-url

SUSPICIOUS: the skill’s purpose is coherent, but it gives agents a broad workflow for fetching arbitrary untrusted web/repo content and writing distilled outputs to local files. The main risk is indirect prompt injection from hostile external content, not credential theft or malware distribution.