arxiv

SUSPICIOUS: the stated purpose matches the capability, and the scanner's command-injection finding is a false positive, but the skill's core design proxies arXiv access and authentication through a third-party Unbrowse service rather than official arXiv endpoints. That intermediary credential/data flow is the main risk; this looks more like a trust and privacy concern than confirmed malware.