social-publisher

SUSPICIOUS. The skill’s marketing purpose matches social publishing, but it grants high-impact public posting capability and appears to route actions through an unclear third-party MCP layer whose provenance and tool surface are not well verified. The main risk is autonomous multi-platform posting plus token/data exposure through an intermediary, not confirmed malware.