autoresearch

SUSPICIOUS: The skill’s research-orchestration purpose broadly matches its file, git, literature, and reporting actions, but it crosses into high-risk territory by mandating continuous autonomous operation, forbidding per-action confirmation, enabling proactive outbound messaging, and delegating to other skills/tools. Install trust is mixed: OpenClaw references appear same-org and official, so this is not confirmed malware, but the overall footprint is high-risk and disproportionate for a skill meant to manage research.