paper-2-web

SUSPICIOUS: the skill’s purpose and capabilities mostly align, and the flagged install command appears to be normal documentation rather than covert behavior. However, it requires cloning and executing a substantial third-party pipeline from a personal GitHub repository and then supplying API keys to that code, which is a meaningful supply-chain and credential-forwarding risk despite no clear evidence of malicious intent in the skill text itself.