Plotting SOP

SUSPICIOUS: the skill is mostly aligned with academic plotting, but it mixes code execution, unpinned npx installation, a local unverifiable setup script reference, and credentialed API calls through OpenRouter. The footprint is plausible for the purpose, yet install trust and third-party data routing raise medium risk rather than indicating clear malware.