deep-research-partnership-planner

SUSPICIOUS. The core purpose is coherent: research-driven partnership planning with local document generation. The main risks come from two proportional but nontrivial trust expansions: sending sensitive business context to an external deep-research service and relying on an unspecified secondary skill (/skill::plugin-search-and-use). No credential harvesting, hidden exfiltration endpoint, malware behavior, or suspicious installer chain is present in the supplied skill text, so this is not malicious; however, the transitive skill dependency and untrusted-content ingestion make it medium risk.