content-planner

SUSPICIOUS: the skill's overall purpose is coherent, but its footprint is broader than a simple planner because it exports the full `.env`, reads all context files, and forwards credentials/data to multiple subagents and third-party services (Apify and TubeLab) rather than only official platform APIs. No binary installer, covert behavior, or confirmed exfiltration endpoint appears here, so this is not confirmed malware; the main risk is disproportionate credential sharing and intermediary data flow.