talktoads

The skill is purpose-aligned and does not show malware-like install behavior, but it relies on a third-party hosted MCP service that receives Meta OAuth access and business-sensitive ad data, and it can trigger spend-affecting actions. That makes it medium risk and mildly suspicious from a trust/data-flow perspective, not malicious.