scientific-slides

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The skill explicitly instructs uploading local files (via --attach) and using an external API key (OPENROUTER_API_KEY) to call a remote AI service (Nano Banana Pro / OpenRouter), which intentionally transmits user-provided figures, slides, and likely prompt data to an external server — a clear vector for data exfiltration of sensitive files if misused or used without proper consent/controls.