contentful-personalization

SUSPICIOUS. The skill’s stated Contentful-personalization purpose is broadly coherent, and its referenced external API domain appears official to Contentful/Ninetailed. However, the workflow’s dependency on an unverifiable compiled local runner is disproportionate and triggers high supply-chain risk, while the instruction to conceal raw commands/protocol adds a transparency concern. No confirmed credential theft or malicious exfiltration is shown, but the install/execution trust is insufficient for a benign classification.