zotero-mcp-code

SUSPICIOUS: the stated purpose is coherent with Zotero searching, and there are no explicit malicious or exfiltration instructions. However, the skill's essential functionality depends on executing unreviewed local code from a hard-coded absolute path, with no provenance or install trust information, so its actual behavior cannot be fully verified from the skill alone.