claude-marketing-skills

SUSPICIOUS: the overall purpose is coherent for a marketing skill suite, but the trust model is broader than necessary. Main concerns are installation from a personal GitHub repo with executable setup scripts, credential forwarding into MCP tooling, one MCP install path that does not match current official docs, and autonomous Slack posting workflows. I do not see confirmed malware or clear credential theft, but the supply-chain and workflow scope make this a medium-high security risk.