literature-review-writer

Overall suspicious-but-not-malicious. The skill’s capabilities largely match its stated purpose, and it does not request credentials or use obviously hostile endpoints. The main risks are the undocumented transitive dependency on `literature-verifier` and the prompt-injection exposure from web-searching untrusted content while also writing files and executing a local script.