academic-verify

SUSPICIOUS. The stated purpose is coherent, and this skill itself mostly acts as a documentation-style workflow wrapper, but its core behavior is delegated to another skill whose install trust, permissions, endpoints, and credential handling are not visible here. Main risks are transitive trust and prompt-injection exposure from external research content, not confirmed malware or direct credential theft in this file.