codex-deep-search

SUSPICIOUS: the stated purpose broadly matches deep research, and the Codex CLI dependency is plausibly official, but the skill's actual footprint is wider than necessary because it routes outputs through Telegram and relies on an unseen local wrapper script. The main risk is third-party data flow and unattended background execution, not confirmed malware.