weakness-scanner

SUSPICIOUS. The stated purpose is coherent for literature review, but the skill’s footprint is broader than necessary: it mixes untrusted web ingestion, writable outputs, bash-capable tool namespaces, and transitive skill dependencies. Most concerning is reliance on a paperpile* executable path whose official public CLI provenance was not verified, making execution trust weaker than the benign research purpose would suggest.