paperclip

SUSPICIOUS. The API-management purpose is coherent, but the install footprint is not: the skill directs users to unofficial or unverifiable Paperclip CLI sources and a remote pipe-to-shell installer, then asks them to supply API credentials to that tooling. Direct API examples are proportionate, but the publisher/source mismatch and credential forwarding make the skill high risk.