gomtm-aitoearn-dev

SUSPICIOUS: the skill’s footprint is broadly coherent with an AI-to-social automation product, but it is incomplete, relies on remote code execution via npx, and routes credentials/actions through AiToEarn’s centralized gateway and relay rather than direct APIs. This looks more like a risky third-party automation integration than confirmed malware.