skill-share

SUSPICIOUS: the core workflow is coherent for skill creation and team notification, but the Slack integration depends on an outdated third-party gateway model (Rube/Composio-style middleware) rather than direct Slack API use. This is not confirmed malware, but it creates medium risk through intermediary handling of workspace actions/data and underspecified posting scope.