biomed-dispatch

SUSPICIOUS. The skill’s core purpose is plausible, but its execution model is overly powerful: it always runs Claude Code in bypass-permissions mode and may install arbitrary unpinned Python packages on failure. There is no clear credential theft or attacker-controlled exfiltration endpoint, so this is not confirmed malware, but it is a high-risk vulnerable skill due to disproportionate permissions and supply-chain exposure.