ml-paper-writing

SUSPICIOUS: the core paper-writing and citation-verification behavior is coherent and largely benign, but the skill unnecessarily recommends installing an unpinned third-party MCP bridge (`mcp-remote`) instead of Exa's primary direct Claude Code setup. That creates moderate supply-chain and transitive-trust risk without evidence of outright malicious intent.