research-pipeline

SUSPICIOUS. The skill's purpose is coherent for research automation, but its footprint is high-risk: broad Bash(*) access, autonomous remote experiment actions, ingestion of untrusted external content while retaining write/exec powers, and a directive to act silently. Install provenance is mostly benign from the provided evidence, so the main concern is unsafe autonomy and data/action flow breadth rather than confirmed malware.