skill-nix-research

SUSPICIOUS: the core purpose is coherent for a Nix research skill, and no credential harvesting or off-platform exfiltration is evident. Main risk comes from delegated subagent trust, untrusted web-content handling with write/exec permissions, and automatic repository modification via `git add -A` and commit.