using-axiv-cli

SUSPICIOUS. The workflow is mostly well-scoped for alphaXiv research and library management, but trust is undermined by the unclear `axiv` vs `alphaxiv` identity and unverifiable publisher relationship. Because authenticated operations are forced through that CLI, the main concern is supply-chain and credential-forwarding risk rather than confirmed malicious behavior.