marketing-brain

SUSPICIOUS. The skill's purpose and capabilities mostly align, and installation trust is reasonably coherent with Cogny's official setup. The main concern is data-flow integrity: sensitive CRM, store, and Stripe data are funneled through Cogny's intermediary MCP gateway instead of direct vendor APIs, creating a concentrated third-party trust boundary. Broad tools like Bash and file writes add moderate risk, but there is no clear evidence of malware, credential theft, stealth, or unrelated access.