academic-figure-generation

SUSPICIOUS: the skill’s core behavior matches its stated purpose, but it relies on an external GitHub project and delegates API-key handling to that project. The Gemini path is proportionate, while the OpenRouter option introduces intermediary credential/data routing that is less aligned with direct official API use. This looks more like a legitimate but medium-risk wrapper than malware.