bib-validate

SUSPICIOUS: the core purpose is coherent, but the skill expands from local bibliography checking into mandatory external cross-referencing, undocumented CLI trust, sub-agent orchestration, and possible automatic Paperpile modifications. The main concern is execution and data-flow breadth relative to a 'validator,' not clear malware.