autoresearch

SUSPICIOUS: the skill's purpose matches local autonomous optimization, but its footprint is high-risk because it grants persistent, unsupervised shell execution and repo mutation with explicit 'never stop' behavior. No clear credential theft, exfiltration, or external supply-chain abuse is present, so this is not confirmed malware, but it is a dangerous autonomous coding skill.