alterlab-paper-2-web

SUSPICIOUS: The skill’s capabilities mostly align with its academic media-conversion purpose, but it relies on executing a large third-party pipeline from a personal GitHub repo, uses unpinned dependencies, and forwards paper content plus API-backed prompts to external LLM providers. This looks more like a legitimate but medium-risk integration than malware; the main concerns are supply-chain trust and confidentiality of unpublished papers.