deep-research-glim

SUSPICIOUS. The skill's capabilities largely match its research purpose, so it is not fundamentally malicious on its face. However, it routes core functionality through a third-party MCP service run by a different org, aggressively processes untrusted external content via parallel subagents, and increases indirect prompt-injection and supply-chain exposure beyond a simple research guide.