paperpile

SUSPICIOUS: the skill's purpose broadly matches its capabilities, but it depends on an unverifiable local CLI and helper scripts that receive live browser-derived auth cookies and perform authenticated network actions. The load-time pre-exec is benign, yet the credential forwarding to a custom local binary makes this a high security-risk skill even without clear evidence of malicious intent.

The exact fragment cannot execute because it contains a syntax error. Apart from that defect, it appears to be a paper-resolution and download utility. It handles sensitive browser authentication cookies and has an output-path traversal risk through an unsanitized bibkey. No clear malicious exfiltration or destructive behavior is present in the supplied code.

The polling behavior is consistent with the stated purpose, but interpolating the untrusted item ID into executable Python creates a clear code-injection vulnerability. Pass values as arguments or use safe serialization rather than constructing Python source.