sales-call-prep

SUSPICIOUS: The skill's stated purpose is coherent, and the visible SKILL.md is mostly a benign workflow description. The main concerns are the unverified third-party npx installation path from a community marketplace and the skill's ingestion of untrusted external content and optional business-system data without concrete connector/data-flow details. No direct credential theft or exfiltration is shown, but install-trust and prompt-injection risks make it higher than benign.