crosspost

SUSPICIOUS. The skill's purpose matches crossposting, but it enables autonomous public posting and includes a pattern that routes user content and API credentials through a third-party intermediary rather than only official platform APIs. No malware or installer abuse is evident, but the real-world action scope and intermediary data flow make it medium-high risk.