claude-paper-study

SUSPICIOUS: The skill's overall purpose is coherent for paper study, and its installs come from standard package managers rather than obvious malware channels. However, it auto-installs unsupplied dependencies, executes unsupplied local downloader/parser scripts on untrusted PDFs and URLs, and invokes another skill, creating medium supply-chain and transitive-trust risk without evidence of outright credential theft or malicious exfiltration.