research-recipes

SUSPICIOUS: the skill’s overall purpose is coherent for biomedical research, and its API/data flows mostly match that purpose, but it is high-risk operationally because it authorizes fully autonomous multi-step execution from a single prompt and mixes untrusted external content ingestion with tool use and file generation. The main concern is agentic scope and prompt-injection exposure, not overt malware or credential theft.