alphaxiv

SUSPICIOUS: the paper-fetching behavior is coherent and uses appropriate official domains, but the mandated Step 6 expands the skill into automatic local script discovery/execution and wiki mutation on every run. This is broader than a quick paper lookup and introduces meaningful execution-trust risk even without clear credential theft or confirmed malware.