linkedin

SUSPICIOUS: The skill is internally coherent and uses a verifiable same-org npm CLI, so it does not look malicious. However, it enables high-impact social-media actions through a third-party automation service and forwards provider tokens/data to that service, making the overall risk medium-high despite good purpose alignment.