mailchimp-automation

SUSPICIOUS. The skill’s Mailchimp capabilities are aligned with its stated purpose, and there is no sign of credential-file theft or hidden code execution. However, the setup instructions are inconsistent with current official vendor docs, pointing to a deprecated Rube MCP endpoint and oversimplifying trust requirements; combined with proxy-style routing of Mailchimp access through third-party infrastructure, this makes the skill medium risk rather than benign.