showcase

SUSPICIOUS. The skill’s capabilities mostly fit its publishing/showcase purpose, but it delegates core behavior to unseen commands and performs remote publication plus app-driving/screenshot capture. Risk is moderate from transitive trust and autonomous publication, not from malware-like exfiltration or installer behavior in this file.