custom-skills-threads-research

SUSPICIOUS. The skill’s purpose is coherent and it mainly accesses public web content, but it requires transitive installation of MCP servers, including an unpinned third-party `context-mode` package executed via `npx`. Data flow is broadly consistent with social-media research, yet the combination of remote tool installation and untrusted-content processing makes it medium-high risk rather than benign.