autoresearch

SUSPICIOUS: the skill’s stated purpose matches autonomous research orchestration, but its footprint is high-risk because it combines persistent self-triggered operation, broad file/command authority, and ingestion of untrusted external content. Install sources are mostly legitimate and proportionate, so this is not confirmed malware; the main issue is unsafe autonomy and prompt-injection exposure rather than deceptive credential theft.