alterlab-paper-2-web

SUSPICIOUS: the skill's purpose is coherent, but its actual footprint relies on installing and running a substantial third-party repository unrelated to the stated publisher, forwards API keys into that external code, and instructs the agent to invoke another skill. This looks more like a documentation wrapper around external tooling than a self-contained AlterLab skill, creating medium security risk without clear evidence of malicious intent.