run-research

SUSPICIOUS: the skill's behavior is mostly aligned with its stated research purpose and shows explicit prompt-injection awareness, but it relies on an external MCP toolchain with inconsistent public provenance and credential forwarding to third-party-backed retrieval services. This looks more like a medium-risk trust/supply-chain issue than malicious intent.