sales-automator

SUSPICIOUS. The skill’s stated purpose and capabilities are internally consistent and there is no sign of credential harvesting or exfiltration in the content itself. However, the only observed installation path is an unverified third-party zip download without clear provenance or integrity verification, making the overall risk high from a supply-chain perspective rather than from the skill instructions themselves.