linkedin-ads-campaign-setup

SUSPICIOUS: the skill’s main advertised purpose is benign marketing guidance, but it unnecessarily pushes a specific third-party service, asks for an API key, and instructs execution of an unpinned external MCP package. Data flows stay on same-brand ColdIQ endpoints, so this is not confirmed malware, but the vendor-coupled install and credential forwarding are broader than needed for a campaign-setup skill.