x-article-publisher

SUSPICIOUS: The skill’s core purpose matches its browser-automation behavior, and it does not show clear credential exfiltration or hidden malware. Risk comes from persistent session storage, use of a third-party stealth automation package, unpinned dependencies, and optional transitive skill use; these are meaningful but not fundamentally incompatible with the stated publishing purpose.

SUSPICIOUS. The core purpose is coherent with browser automation for drafting X Articles, but the trust footprint is larger than necessary: persistent session storage, a third-party patched automation dependency, and transitive skill installation guidance. No clear exfiltration or overtly malicious behavior is shown, but the install and credential-handling model warrants caution.