doc-research

SUSPICIOUS. The stated purpose is coherent for a documentation-research skill, and its workflow is mostly proportional, but the external-tool provenance is inconsistent: the evidence supports official Context7/ctx7, not the skill’s named c7.ts, and web2md.ts is likewise unverified. There is no strong sign of malware or credential theft in the skill text itself, but the unverifiable tool references and untrusted content ingestion make the skill a medium security risk.