post-publish-folder

SUSPICIOUS. The core purpose and Late API credential are broadly consistent with a social publishing skill, and the visible install story is relatively clean. However, it routes posting through a third-party gateway instead of direct platform APIs, includes an unrelated optional InsForge connection string, and most importantly enables autonomous public posting/scheduling with real-world consequences; that makes it medium risk even without signs of overt malware.