threads-growth-skill

SUSPICIOUS. The skill's general purpose aligns with scraping Threads performance, but its trust model is disproportionate: it collects full session cookies, installs from an unverified personal GitHub repo despite different publisher branding, executes repo shell scripts, and adds cron persistence. Without script visibility, the data-flow and privacy claims cannot be validated, so the overall risk is high even without proof of malware.