substack-content-planner

SUSPICIOUS. The core planning behavior is benign and well-scoped, but the skill's recommendation of a non-official substack-publisher CLI creates a trust and credential-forwarding mismatch for a planning skill. Risk is moderate rather than malicious because the skill itself performs no installation, exfiltration, or autonomous posting.