nature-figure

SUSPICIOUS: the skill is mostly coherent for scientific figure work, but its AI-schematic route sends user content and optional local images to a third-party gateway and allows arbitrary endpoint override. No malicious payloads, hidden execution, or suspicious installer chain are present, yet the credential and data routing are broader than a tightly scoped manuscript-figure helper.