releazer

SUSPICIOUS. The core purpose is coherent for a launch-marketing skill, and the named credentials mostly match that purpose. However, the footprint is high risk because the skill is designed not just to draft content but to publish posts, send pitches, and launch paid campaigns, creating autonomous real-world actions without explicit per-action approval. It also ingests potentially untrusted repo/PR content and turns it into outbound actions, which is a meaningful prompt-injection risk. Install trust is mostly local/benign, but the optional Google Ads MCP path adds medium supply-chain risk due to unpinned git-based execution even though it appears to be Google-official. Not confirmed malware, but risky enough to classify as suspicious/high-risk vulnerable.