search-skills

The skill collection is broadly consistent with academic literature search and mostly documents direct calls to relevant services. The principal elevated risk is ChatPaper's third-party installation combined with forwarding an OpenAI API key and paper content to its configured LLM endpoint; unpinned dependencies add supply-chain exposure. Treat as vulnerable/high risk rather than confirmed malware.