ai-research-explore

SUSPICIOUS: the stated purpose is coherent for a research-exploration skill and there is no evidence of credential theft or covert exfiltration in the provided text. Main risk is ecosystem trust and transitive execution: a community-published skill installed via registry can invoke other skills, inspect repos, optionally fetch external content, and trigger experiments, so the overall exposure is medium even though direct malicious indicators are absent.