cited-web-research

SUSPICIOUS. The skill's capabilities mostly fit its stated web-research purpose, and there is no clear credential theft or exfiltration behavior. However, it introduces medium trust risk through a remote MCP server plus transitive plugin installation, and it combines untrusted web ingestion with shell access; the main concern is supply-chain and prompt-injection surface rather than confirmed malware.