paper-2-web

SUSPICIOUS: The stated purpose is plausible, but the actual footprint relies on executing an unpinned third-party GitHub repository from a personal account while forwarding API keys into that code, and it also expands trust by directing use of another skill. No clear credential theft or covert exfiltration is shown, but install trust and transitive dependency risks are significant.