research-orchestrator

SUSPICIOUS: the skill's capabilities broadly match a research orchestrator, but its footprint is high-risk for an AI agent because it combines untrusted content ingestion with Bash, file writes, and delegated subagents. The strongest concern is indirect prompt injection and transitive trust in other skills/CLIs, not clear evidence of credential theft or malicious exfiltration.