threads

SUSPICIOUS. The skill's capabilities broadly match a Threads management tool, and its write path includes meaningful safeguards for posting. The main issue is install/execution trust: it depends on an ambiguously named, externally supplied `threads-cli` binary with no verifiable provenance in the skill, so the account-accessing helper is a black box. No confirmed credential theft or malicious exfiltration is shown, but the unverifiable CLI makes the skill high risk.