ai-content-research-writer

SUSPICIOUS/medium risk rather than malicious. The skill’s data flows largely match its stated content-analysis purpose, but it sends user materials and an API key to a hosted third-party service and sits within an install ecosystem with some package-name/provenance ambiguity. Main concerns are SaaS data exposure, moderate prompt-injection surface from external URLs, and medium supply-chain trust risk from npx-based tooling.