run-research

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and it has no installer, credential-harvesting, or obvious exfiltration behavior. However, it routes the agent through unspecified networked tools, processes untrusted external content with action-capable context, and encourages sending local code/config files to deep_research without clarifying endpoints or trust boundaries.