doc-to-everything

SUSPICIOUS: the stated document-processing purpose is legitimate and the requested file access is proportionate, but the skill's actual footprint depends on several unverifiable external CLIs with unclear provenance and mismatched naming versus known official tooling. No explicit exfiltration or malicious behavior is shown, but the unresolved binary trust chain makes the skill high risk to execute as written.