main

SUSPICIOUS. The core routing, `.writing/` management, and claim-enforcement behavior fit the stated academic-writing purpose, so this is not fundamentally incompatible or overtly malicious. Risk comes from conditional forwarding of Zotero credentials to a third-party `zotero-mcp` tool and from sending draft content through an unspecified 'Codex bridge' for external review; both extend trust beyond the local plugin and are only partially verified. Overall this is a coherent writing skill with medium security risk, mainly from third-party integration and unclear external data-routing details.