experiment-bridge

SUSPICIOUS: the skill is broadly aligned with its stated research-execution purpose, but it grants an agent substantial autonomy to write code, run external workloads, incur cloud/GPU costs, and clone arbitrary repos without pinning. The main concern is operational and supply-chain risk from autonomous deployment and transitive execution, not confirmed malware or credential theft.