arxiv-to-md

SUSPICIOUS. The stated purpose is plausible and the likely data source (arXiv) is consistent, but the skill instructs immediate execution of an unseen local Python module with no provenance or code visibility. Main concern is execution trust and hidden behavior, not confirmed malware or credential theft.