ops-marketing

SUSPICIOUS. The core API usage matches a marketing command center, but the setup workflow is over-privileged and unnecessarily invasive for this purpose: it enumerates credentials from many local stores and scans browser history before asking the user. The skill also supports autonomous public posting and ad/campaign changes, which raises real-world action risk. Data mostly flows to official endpoints, so this is not confirmed malware, but the credential-harvesting footprint is disproportionate and drives a high security risk.