localize-campaign

SUSPICIOUS: The core file access matches a localization skill, but the workflow can route campaign content through unspecified translation servers/MCPs, and it relies on opaque local helper scripts without verifiable provenance. No clear malware behavior, credential theft, or pre-execution payloads are present, but data-flow ambiguity and executable trust gaps raise medium risk.