ai-product-marketing

SUSPICIOUS. The skill’s purpose broadly matches its capabilities, and the API domain appears to be the official service, so this is not clearly malicious. However, the unseen local runner, personal-GitHub quick-start link, inconsistent package provenance, and routine forwarding of API credentials plus user materials to a remote service create medium security risk and prevent a benign classification.