bgpt-paper-search

SUSPICIOUS: The core purpose is coherent and the remote endpoint matches BGPT's stated service, but the skill introduces extra trust in third-party/unpinned npm executables (`mcp-remote` or `bgpt-mcp`) for a task BGPT docs say can often be configured directly. The main risk is supply-chain exposure and possible credential forwarding through local helper packages, not confirmed malicious behavior.