autoresearch

SUSPICIOUS: The skill's capabilities mostly match its stated purpose, and network/auth flows point to Anthropic's official CLI rather than an unknown intermediary. The main risk is proportional but still significant: it grants an agent autonomous write/exec control over a repo while consuming untrusted repo content, creating meaningful prompt-injection and project-impact risk even without obvious malware signals.