gtm-launch-planner

SUSPICIOUS: the core research and planning behavior is broadly aligned with the stated purpose, and the visible dependency appears to be the vendor’s own documented MCP integration rather than an obvious malicious payload. However, the skill relies on third-party MCP tooling with credential forwarding, processes substantial untrusted external content, and instructs installation/loading of another skill, which raises medium trust and prompt-injection risk even without clear malicious intent.