content-pipeline

SUSPICIOUS: the visible skill is mostly a benign local content-generation workflow, but it delegates Stage 4 to an unseen /carousel-creator skill and tells the agent to run that skill's export scripts without further approval. No direct exfiltration or credential harvesting appears here, yet the transitive trust chain and autonomous multi-step execution raise medium risk.