claude-code-academic-workflow

SUSPICIOUS: the skill is broadly aligned with academic workflow automation, but its footprint includes cloning a personal GitHub repo, running repo shell scripts/hooks, and enabling autonomous commit/PR actions. No clear credential harvesting or malicious exfiltration is evident, yet install trust and real-world action scope make it higher risk than a read-only documentation skill.