paywall-upgrade-cro

SUSPICIOUS: the core CRO purpose is benign, but the skill’s actual footprint is broader than necessary. Mandatory external MCPs, execution proxy use, BrowserOS ingestion, and persistent project logging are only loosely related to paywall advice, creating medium trust and prompt-injection risk without clear malicious intent.