scholar-latex-organizer

SUSPICIOUS. The core LaTeX-organizing purpose is benign and most local file operations are proportionate, but the skill expands scope by pulling external context through an ambiguous `maestro` CLI and other web sources while retaining Bash and Write access. That mismatch raises medium risk from supply-chain uncertainty and indirect prompt injection, though there is no strong evidence of credential theft or overtly malicious behavior.