awesome-content-publisher

SUSPICIOUS. The skill is internally coherent: its browser access, ledger, and platform interactions match its stated purpose of publishing posts without handling credentials directly. The main risk is not hidden exfiltration but the deliberate ability to autonomously perform public actions on user accounts after a single approval gate; this is proportionate to the skill's purpose yet still high-impact. Install provenance appears legitimate and same-org official, and no deceptive credential routing or malware-like behavior is evident.