ai-marketing-claude-suite

SUSPICIOUS. The marketing functionality mostly matches the stated purpose and does not request disproportionate credentials, but the installation path is the main concern: a raw GitHub curl|bash installer with unclear publisher-to-repo provenance. Runtime data flows are largely consistent with website auditing, yet the skill also processes untrusted web content and installs multiple agent files, so overall risk is medium-high even without clear evidence of malicious exfiltration.