autoconference-skill

SUSPICIOUS: the skill’s core purpose is coherent, but its footprint is broader than a pure research guide because it grants Bash plus autonomous multi-round agent execution over untrusted web content. The main concern is indirect prompt injection and reduced user oversight, not confirmed malware or credential theft.