trade-thesis

SUSPICIOUS: The skill is purpose-aligned as an investment-thesis writer and does not request credentials or exfiltrate data, but it enables concrete financial decision-making and relies on broad untrusted web research while writing outputs. Main risk is autonomy and prompt-injection exposure, with minor repo-level install-trust concerns rather than clear malware.