paper-fetcher

SUSPICIOUS. The skill's narrow behavior matches its stated purpose, but its core data flow is through an unofficial Sci-Hub mirror rather than official publisher or DOI infrastructure. There is no credential theft or hidden installer, yet the external source is unverifiable and unstable, so the main risk is trust/provenance of downloaded content rather than malware.