linkedin-repurposing

SUSPICIOUS. The skill’s core purpose and content are benign and aligned with LinkedIn repurposing, but it also nudges installation of an external MCP package and forwards an API key to it. Because the install is unpinned and the exact npm package provenance was not independently verified in the provided evidence, the trust model is weaker than a pure documentation skill, though there is no strong sign of malicious intent or off-purpose data exfiltration.