substack

SUSPICIOUS: The skill is largely coherent with its stated Substack publishing purpose and does not show classic malware or supply-chain patterns, but it relies on full session-cookie credentials captured via a partially unverifiable connection path and enables high-impact publishing/email actions. Risk is medium: mainly credential sensitivity, unofficial API use, and autonomous real-world action potential, not confirmed malicious intent.