ai-marketing-kit-orchestrator

SUSPICIOUS: the skill’s marketing purpose broadly matches its capabilities, but its main function is to install and orchestrate many other skills, creating a transitive trust risk. Mixed publisher identity, unverified plugin install commands, and real-world posting/spend capabilities make the overall footprint higher-risk than a normal documentation skill, though there is no clear evidence of overt malware or hidden exfiltration.