lov-media-publisher

SUSPICIOUS. The skill’s purpose and capabilities are largely coherent: it automates video publishing through official web backends and includes meaningful safety gates. The main concern is install/execution trust: it depends on a same-org but not fully source-verifiable ego-browser/ego lite runtime that inherits logged-in browser state, creating a significant supply-chain and session-trust risk. Data flows otherwise appear proportionate and direct to official platform sites, with no clear credential-harvesting behavior.