linkedin-ads-outbound-sync

SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned, and the named API domain is same-brand. The main risk is install/execution trust: it asks the user to run an unpinned external MCP package and pass an API key into it, with only partial public provenance verification from the provided evidence.