research-lookup

SUSPICIOUS: the core research-lookup purpose is mostly coherent, but the skill routes queries and credentials through OpenRouter as an intermediary, includes broader-than-needed Bash capability, and nudges use of an additional schematics skill/script outside its core lookup role. No confirmed malware or hidden execution is present, but the third-party credential/data flow and scope expansion make it medium risk rather than benign.