Fanta Autoresearch

This skill appears to do what it says: automate iterative experiments. It does, however, assume it can run arbitrary verification and background commands. Before installing/using it: - Only supply trusted verification commands (the verify argument is executed via the shell). Avoid passing untrusted strings that could execute unintended shell actions. - If you intend to run autonomous subagents or background execs, constrain their scope (limit modified file paths, use a sandbox or ephemeral environment, set resource/time limits). - Review and, if needed, modify scripts to avoid shell=True style execution or to use safer argument lists to reduce injection risk. - Check where logs are written (default: autoresearch-log.tsv) and ensure sensitive data is not captured there. - Don't grant additional credentials or environment variables to this skill unless you understand and approve each use case (the skill itself does not request any). If you want extra assurance, run the Python script in a controlled environment first and/or have a developer replace subprocess.run(..., shell=True) with a safer invocation that passes args without shell expansion.