prospect-research

SUSPICIOUS. The overall purpose is coherent with prospect research, and most named data sources are relevant official platforms. However, the skill includes unrelated monetization and promotional redirects, and more importantly it instructs the agent to pass a GitHub token to an unverified local CLI with no provenance or release trail. That credential-forwarding pattern makes the skill high risk even without explicit malware or exfiltration endpoints.