papercut-setup

SUSPICIOUS: the skill’s behavior broadly matches its stated setup purpose, but it has a large trust footprint: cloning and executing a personal-repo installer, broad filesystem changes across agent harnesses, package-manager installs, model downloads, and transitive installation of another skill. I see no clear credential theft or covert exfiltration, so this is not confirmed malware, but it is high security risk for an AI skill.