papercut-qa

SUSPICIOUS: the skill’s media-QA purpose is coherent and its file access is mostly proportionate, with no clear exfiltration path in the text. However, it requires multiple Papercut-specific executables/scripts whose provenance could not be independently verified, so the install/execution trust risk is high under the unverifiable-dependency rule.