deep-research

SUSPICIOUS: the skill’s core behavior mostly matches its stated research purpose, but it materially expands the execution surface by combining autonomous web ingestion, browser automation, shell commands, and an external Gemini CLI/helper script whose exact credential and data handling is not visible here. The main concern is medium security risk from indirect prompt-injection exposure and opaque CLI/script delegation, not confirmed malware.