implement-paper

SUSPICIOUS: the stated purpose is coherent, but the skill pulls untrusted external content from a third-party paper service and may chain into other skills, creating prompt-injection and transitive-trust risk. Its footprint is still proportionate to notebook generation, and there is no clear credential harvesting or exfiltration behavior.