deepresearch

SUSPICIOUS. The core research/OSINT methodology is broadly aligned with its purpose and does not show credential theft, exfiltration, or malicious pre-execution behavior. Risk comes from the mandatory transitive skill dependency (@cursor-agents-md) and an unverified recommended browser component, plus the normal indirect prompt-injection surface of browsing untrusted content.