gtm-workflow-enrich-network

SUSPICIOUS. The skill’s stated purpose is coherent, but it introduces medium risk by instructing the agent to install additional skills from an unpinned third-party GitHub repository through the skills CLI. Data handling otherwise matches the workflow-building purpose, with no direct evidence of credential theft or malicious exfiltration in this skill alone.