codex-marketing-skills

SUSPICIOUS. The overall footprint is mostly consistent with a marketing automation skill pack, and the documented API endpoints are generally legitimate. However, it is a broad multi-purpose bundle from a personal/private repo, it relies on several external CLIs and credentials, includes Gmail access, and supports public posting via Buffer. This looks more like a high-risk automation toolkit than clear malware: coherent in purpose, but unusually expansive and requiring careful trust and approval boundaries.