auto-paper-demo

SUSPICIOUS: the core purpose is plausible, but the skill combines untrusted external content ingestion with autonomous notebook/code generation and transitive reliance on other skills. No clear credential theft or malware behavior is present, but prompt-injection and delegated-trust risks make it higher than a benign documentation skill.