mdtero

SUSPICIOUS. The core purpose and primary capabilities are coherent for a paper-to-Markdown cloud parsing skill, and the main uv/PyPI install path appears same-org and verifiable. Risk comes from the included curl|sh fallback and, more importantly, explicit transitive installation of another skill, which is disproportionate to simple document parsing and increases trust-chain exposure.