paper-to-skill

SUSPICIOUS: the core purpose is coherent, and there is no direct credential theft, malware, or dubious installer in this skill itself. The main risk is that it ingests untrusted paper/HTML content and turns it into executable skill output via other trusted skills/agents, creating a meaningful prompt-injection and transitive-trust surface disproportionate to a simple document-conversion workflow.