marketing-pipeline-share-content-automation

SUSPICIOUS: the skill’s stated marketing automation purpose is broadly coherent, but trust is weakened by a personal GitHub install source that does not clearly match the named publisher, lack of release/signature provenance, and mismatches between documented and observed dependencies. No confirmed malware or clear credential theft behavior is evident, but the provenance and credential-forwarding model justify medium risk.