phoenix-research-pipeline

SUSPICIOUS. The skill’s core capabilities mostly match its research purpose, and the Brave/Reddit/yt-dlp usage is broadly coherent. The main concerns are supply-chain and credential-routing: a hidden local installer writes secrets to .env, the docs encourage embedding a shared API key in install.sh, and Google NotebookLM access is mediated by third-party CLIs/packages rather than a clearly official Google client. This is not confirmed malware, but it is a medium-high risk skill that should not be trusted without reviewing install.sh and the NotebookLM backends.

No direct malicious behavior or data exfiltration is evident in the provided script. It is an installer with expected package installation and configuration-writing functionality. Supply-chain risk is elevated because dependencies are unpinned and installation/import hooks execute with local privileges. The generated .env file may expose the API key through default permissions, and unescaped key content can corrupt configuration. Review package provenance, pin hashes or versions, use an isolated virtual environment, and apply restrictive permissions to .env.