catalog

No clear evidence of traditional malware (e.g., backdoor logic, credential theft, network exfiltration, reverse shell) is present in the visible code. However, the module has two substantial security concerns: (1) a high supply-chain risk fallback that runs 'npx -y @bufferapp/cli@latest' at runtime when the local 'buffer' binary is absent, enabling execution of unpinned, time-varying third-party code; and (2) a 'query' feature that executes arbitrary user-supplied SQL against the local SQLite database. Additionally, the provided fragment appears syntactically incomplete/corrupted, limiting verification of schema/DDL and other statements. Overall: moderate-to-high security risk primarily driven by runtime dependency execution and untrusted SQL execution, not by obvious malicious payloads inside this snippet.

SUSPICIOUS: the drafting and repository-inspection behavior fits the stated editorial purpose, but the skill also enables public posting/scheduling and references a likely unofficial Buffer CLI. That creates disproportionate autonomy and credential-forwarding risk for a writing skill, especially if tokens are passed into a non-Buffer binary.

SUSPICIOUS: the skill’s purpose is coherent as a catalog gateway, but its actual footprint is to dynamically ingest remote instructions and optionally install additional skills, creating a transitive trust and prompt-injection path disproportionate to a simple discovery helper. No direct credential theft is evident, but the remote-content loading and skill-to-skill installation make it high security risk.